0ddba11:
Despite being something you'd think would be relatively simple, there's a huge amount of complexity behind the scenes getting all this to work, so without more information, there's only so much I can suggest.
These are all kind of generic, but they should point you in the right direction, and perhaps help to obtain some more useful debugging data. |
Here's an update.
Two things have ocurred recently.... Number One If you check this bug at https://bugzilla.redhat.com/show_bug.cgi?id=517195 you'll note that it now says 'Fixed In Version: samba-3.0.33-3.23.el5 '. This is great news. However... Number Two I have now implemented a different (and I think more appropriate solution) using the pam_mount module. I'd never seen this pam module before, and when I read what it does I couldn't believe my eyes - it mounts volumes when a user starts a session and unmounts them when their session ends! Perfect. Whilst an RPM wasn't available for Red Hat 4 I found some extra packages for Cent OS 4 here: http://centos.karan.org/el4/extras/stable/ which install and run just fine on RHEL4. (remember to get both the 32 bit and 64 bit RPMS if you're running a 64 bit system as some 32 bit apps like Exceed onDemand need the 32 bit pam_mount.so) For those who are interested, here is my /etc/security/pam_mount.conf: Code:
debug 0
And to make it all work, here my /etc/pam.d/sshd: Code:
#%PAM-1.0 And that's it for the year from me - I'm off to Malaga for Christmas now!!! :D Merry Christmas everybody, and Happy New Year. |
I just finished reading about pam_mount and it sounds absolutely perfect, not to mention being a more elegant solution than the autofs kludge I was going to put together. Thanks a bunch for enclosing your detailed configuration information and explanation, it should be a major time saver!
Unfortunately, while the Red Hat patch is good news, it doesn't apply to me as I'm using the unofficial SerNet Samba binaries for CentOS 5 that upgrade the Samba packages to 3.2 (as well as having RPMs for 3.3 and 3.4 available). The reason for this is the 3.2 branch is the earliest Samba branch that supports certain features I need, in particular SMB signing. Fortunately, the relevant fix for cifs.upcall is simple and can easily be patched into the 3.2 source and compiled with the included SerNet SRPMs. Of course, this is fairly tedious and a time sink, as it really ought to be done each time the packages are upgraded (even if you can get away with not doing so). I might see if I can convince SerNet to backport the fix into their packages, otherwise, the SRPM recompiles will have to continue. Still, the pam_mount solution sounds excellent, so thanks again for reporting back. Also, I hope you enjoy your Christmas holiday :) |
There is actually another fix which works just perfectly:
Code:
/etc/auto.cifs Now, when user daenney with uid 10005 logs in the following is being called: Code:
"-fstype=cifs,sec=krb5,uid=10005,user=daenney ://files/Users/daenney" |
All times are GMT -5. The time now is 08:01 PM. |