Bug 847823 - authconfig cannot set up sssd automount map caching
Summary: authconfig cannot set up sssd automount map caching
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: authconfig
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Tomas Mraz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-08-13 16:33 UTC by Jason Tibbitts
Modified: 2012-09-25 20:12 UTC (History)
4 users (show)

Fixed In Version: authconfig-6.2.4-1.fc19
Clone Of:
Environment:
Last Closed: 2012-09-25 20:12:20 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Jason Tibbitts 2012-08-13 16:33:59 UTC
SSSD now (as of F17) has support for automount maps (considered experimental, and requiring the installation of the libsss_autofs package), but authconfig doesn't know how to configure it.  There's this from authinfo.py:

# Now replace sss with ldap or remove it
# in all non-user info entries - this might be changed in future
# if sssd is able to provide automounts, netgroups, and so on.

which I just suppose needs to be (perhaps conditionally) disabled for the automount: line.  Additionally, "autofs" needs to be added to the services line in the sssd section of sssd.conf.

In my particular installation, I also have to tell sssd the format of my automount maps and entries in ldap, because I'm using the old NIS-based maps.  This means I get to add the following options to my domain in sssd.conf:

ldap_autofs_map_object_class = nisMap
ldap_autofs_map_name = nisMapName
ldap_autofs_entry_object_class = nisObject
ldap_autofs_entry_key = cn
ldap_autofs_entry_value = nisMapEntry

And while it would be doubly awesome if autoconfig gave me a way to set that, I certainly wouldn't blame anyone for telling me to take care of that myself.

Comment 1 Tomas Mraz 2012-08-13 16:42:40 UTC
I'd probably like to wait for removal of the experimental status of this feature.

Comment 2 Stephen Gallagher 2012-08-13 17:03:56 UTC
Tomas, could you just key it off the presence of the libsss_autofs package on the system (similar to how you work with pam_oddjob_mkhomedir)?

I think that would be the easiest solution. libsss_autofs isn't a strict dependency for SSSD; it's installed intentionally when the user wants to use SSSD for automount caching.

Comment 3 Tomas Mraz 2012-08-13 17:10:37 UTC
OK, this looks fine to me.

Comment 4 Dmitri Pal 2012-08-13 19:42:33 UTC
In the SSSD 1.9 that is current in the RC cycle it is supported, it is not an experimental feature any more.


Note You need to log in before you can comment on or make changes to this bug.