Creating automounts with Identity Management

Latest response

Hi,

I'm currently building an Identity Management server on Red Hat 6.4 but I am running into some issues with the automount.
We have multiple NFS servers that Identity Management will need to push out to clients/servers.

NFS Server 1:
This server has a few automounts that will need to be shared.
/export/home
/export/share1
/export/share2

So in the Identity Management GUI I configured the following.
Added a Automount Location called NFS_Server1
Added Direct Map
           Map: auto.home
Added Automount Keys with the following information
           Key: /home                     (I assume this field will mount the directory listed below on to each server that looks at Identity Management)
           Mount Information: -rw, soft, NFS_Server:/export/home/

I configure nsswitch.conf so my automount looks like the following;
files       ldap       sss

 

Can someone tell me what I am doing wrong with this configuration?

Thanks.

 

 

EDIT:
After some trial and error I think I found the proper way to input the automount information into IPA but I am getting an error.

ipa automountlocation-tofiles NFS_Server
/etc/auto.master:
/-          /etc/auto.direct
/home   /etc/auto.home
-----------------------------
/etc/auto.direct
-----------------------------
/etc/auto.home:
home               -rw,soft nfs_server:/export/home

When I view /var/log/messages I see the following line;
setautomntent:lookup(sss): setautomntent: no such file or directory

My nsswitch.conf reads the following for the automount line;
automount          files    sss

Anyone able to point me in the right direction for this?

Thanks,

Matt

Responses

Have you configured the /etc/autofs_ldap_auth.conf to authenticate against IPA? And also the needed settings for /etc/sysconfig/autofs, as specified in the Identity Management Guide chapter 10 ?

Also it seems you should use ldap not sss for automount in nsswitch.conf.

Personally I quickly decided there wasn't much point for us doing autofs via IPA, as we can just as easily distribute the maps using puppet...

Viability of using file-pushing tools probably depends on how frequently you change your maps and whether you wish to maintain data in more than one source. Even if your maps almost never change, there's plenty of shops that follow the mantra "all the configuration data in one place".

 "all the configuration data in one place" -- Yes, and typically in the configuration management system, not in the IDM :-) Automount maps feels more like pure service configuration, than Identity/Policy/Audit to me. 

Hey Jan,

I found out that I had an older version of the IPA guide. Found a more up to date one that has that specific section.
 

I got my automounts working on my IPA Server. Next step is connecting some clients to IPA and seeing how the automount goes.
Thank you very much for taking some time to help me out.

Matt

i have the same issue please can you share the IPA guide link you used ?

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.