3 ms·
That’s true. For me, I made a dataset for each user as a home directory. Each home directory was then exported over NFS. In order to automate the export, I hav
by mbreese 5y ago
That’s true. For me, I made a dataset for each user as a home directory. Each home directory was then exported over NFS.
In order to automate the export, I have a single script that can be executed with sudo on that system to manage both the creation of the dataset and the export.
So, there are still ways, if you’re able to use sudo.
- aidenn0 5y agoYeah, I can sudo on the NAS, but not on the nis server
- mbreese 5y agoIf it helps… My LDAP and NFS servers are separate too. I control both, so it’s a bit different, but I still have it setup so that account creation and home directory creation/export are handled in one script. The account creation script (on the LDAP server) makes an SSH call to the NFS server to run the home directory creation/export update script. That specific SSH certificate is password-less and restricted to running only that single command. It could be root or another user that calls sudo. So, some of what you’re looking for can be done with some SSH tricks… but only if both sides are comfortable with that setup. The benefit is that each side can manage their own scripts. The NIS admin can write the script on their side and NFS on their side. You just need to establish the workflow that works best for you. Our cluster is completely self contained, so with sudo and SSH restrictions, I’m not concerned about security issues with this setup.