LinuxQuestions.org - oddjob/mkhomedir not creating home directory for AD users

Hello everyone,

I've joined one Centos 7 machine on domain controller (2016 R2) sometime ago via realmd. I've noticed today that system isn't able to create home directories for AD users. For example:

Code:

[PRODUCTION root@ATPROXY01:~]su - test

Creating home directory for test@example.com.

Last login: Fri Apr  5 20:58:19 CEST 2019 on pts/0

su: warning: cannot change directory to /home/test@example.com: No such file or directory

[PRODUCTION test@example.com@ATPROXY01:root]

My best guess is that pam_oddjob_mkhomedir.so is causing the issue, but I'm not able to figure it why. Permitted users are able to log in and they are reachable with commands such id/getent. sssd logs aren't report anything wrong. I have few configuration files in pam.d that uses

Code:

session optional pam_oddjob_mkhomedir.so umask=0077

line. I've compared this files with files on other working host that are basically using same configuration, and they are all the same. I've made a full Centos 7 update just for sanity, but nothing has changed. I also tried with authconfig (enablemkhomedir), but everything is the same. I've also tried to with cleared sssd cache.

sssd.conf

Code:

[sssd]

domains = example.com

config_file_version = 2

services = nss, pam

default_domain_suffix = example.com



[pam]





[domain/example.com]

ad_domain = example.com

krb5_realm = EXAMPLE.COM

realmd_tags = manages-system joined-with-samba

cache_credentials = True

id_provider = ad

krb5_store_password_if_offline = True

default_shell = /bin/bash

ldap_id_mapping = True

use_fully_qualified_names = True

fallback_homedir = /home/%u@%d

access_provider = ad

I've found similar treads on internet but they are not working for me, they are either to old or not applicable for my situation. Google led me also to Red Hat support page with similar topic, but I'm not able to read since I don't have subscription :) But for what I can see, that started elaboration on issue with "The systems are configured properly, however pam_oddjob_mkhomedir is failing to create the home directories due to a lack of information on AD side"

I'm not sure what is left for me to debug.

Can you help me please?

Thanks,
Bojan