Hi Sam.

On Sat Jan 05, 2019 at 08:12:16AM -0500, Sam Hartman wrote:
> I'd value the autofs configuration much more than the directory setup
> instructions.
You want it? You get it! ;)

autofs.conf:

root@dagon:~# cat /etc/autofs.conf 
# Managed by ansible
[autofs]
browse_mode = False
entry_object_class = automount
map_attribute = automountMapName
search_base = cn=badphish,cn=automount,dc=badphish,dc=ypbind,dc=de
value_attribute = automountInformation
master_map_name = /etc/auto.master
ldap_uri = ldap://ipa-1.badphish.ypbind.de
timeout = 300
entry_attribute = automountKey
map_object_class = automountMap
auth_conf_file = /etc/autofs_ldap_auth.conf

auto.master:

root@dagon:~# cat /etc/auto.master
# Managed by ansible
/home 
ldap:automountmapname=auto.home,cn=badphish,cn=automount,dc=badphish,dc=ypbind,dc=de
 -rw,hard,intr,nosuid,browse
/share 
ldap:automountmapname=auto.share,cn=badphish,cn=automount,dc=badphish,dc=ypbind,dc=de
 -rw,hard,intr,nosuid,browse

/etc/autofs_ldap_auth.conf:
root@dagon:~# cat /etc/autofs_ldap_auth.conf 
<?xml version="1.0" ?>
<!--
Managed by ansible

This files contains a single entry with multiple attributes tied to it.
See autofs_ldap_auth.conf(5) for more information.
-->
<autofs_ldap_sasl_conf
     usetls="yes"
     tlsrequired="no"
     authrequired="yes"
     authtype="GSSAPI"
     clientprinc="host/dagon.badphish.ypbind...@badphish.ypbind.de"
/>

For /etc/autofs_ldap_auth.conf the owner and the permissions _must_ be 
root:root and 0600 (rw-------)
otherwise automount refuses to start.

> I have no desire to go install centos7 to debug a Debian bug:-) and have
> some familiarity with setting up LDAP.
Obviously :)

So long,

Andreas.

-- 
"Things that try to look like things often do
 look more like things than things. Well-known fact."
Granny Weatherwax - "Wyrd sisters"

Attachment: signature.asc
Description: PGP signature

Reply via email to