Chapter 10. File Access
10.2.4.4.2. Mounting the homedirectories on the ThinLinc server
Depending on how the NFS-exports of filesystems on the Netware servers are organized, it’s more or less
easy to mount the homedirectories on the ThinLinc server(s).
10.2.4.4.2.1. All homedirectories on one export
If all homedirectories are found under one export, just add a line to /etc/fstab that mounts that path as
/home. This situation is however rare. Remember to put nfsvers=2 if the server only exports using NFS
v2. Another option is let autofs mount the home directories using a wildcard entry in the automounter
map.
10.2.4.4.2.2. Homedirectories spread among several servers and/or mountpoints
If the homedirectories are spread among several different servers and/or on several different exports, it’s
less easy to mount the correct path. For this purpose, ThinLinc provides the program tl-nds-mountpath
that searches LDAP and deducts the correct mountpath from the ndsHomeDirectory value.
The tl-nds-mountpath is added on a line in /etc/auto.master. An example line looks like this:
/home program:/opt/thinlinc/libexec/tl-nds-mountpath nfsvers=2,hard,intr
This will cause tl-nds-mountpath to search LDAP for the correct mountpath for a specific user. The
program reads its parameters from /etc/ldap.conf or /etc/pam_ldap.conf, that is, it’s using the
same DN and password as pam_ldap and nss_ldap . Make sure the DN have the permissions to read the
ndsHomeDirectory attribute or tl-nds-mountpath will not work as expected. Use the ThinLinc Novell
Configurator as documented in Section 9.3.1 to create and configure the special DN used to search
LDAP for the needed information.
Note: In some Linux distributions, the /etc/auto.master syntax above will not work. Instead, the
line should look like this:
/home program /opt/thinlinc/libexec/tl-nds-mountpath nfsvers=2,hard,intr
SUSE Linux Enterprise Server is one example where this syntax is required.
Since many eDirectory installations has one or several entries where the ndsHomeDirectory has an
invalid value, tl-nds-mountpath normal behaviour is to check the result of the LDAP query to make sure
the key is also in the result. For example, when asked for the mountpath for the home directory of the
user alice, it checks that the result contains the string alice, in a case-insensitive string search. This
means that if the environment is setup so that the username is not in the home directory path,
tl-nds-mountpath will not work. If this is not the desired behaviour, it can be turned off by setting
/utils/tl-nds-mountpath/key_in_result_verify to 0.
The filter used by tl-nds-mountpath to find the user object and hence the ndsHomeDirectory attribute
can be configured in the parameter /utils/tl-nds-mountpath/ldapfilter. The default filter
removes alias objects from the result.
120
Comentarios a estos manuales