Chapter 11. Managing User Accounts
11.1. Setting up User Home Directories
/home/directory. For example, IdM expects a user with the user_login login to have a home directory set up at
11.1.1. Mounting Home Directories Automatically Using the PAM Home Directory Module
Supported PAM Home Directory Modules
pam_oddjob_mkhomedir. If this module is not installed, IdM attempts to use
Configuring the PAM Home Directory Module
--mkhomediroption with the
ipa-client-installutility when installing the machine.
authconfigutility. For example:
# authconfig --enablemkhomedir --update
authconfigto create home directories, see the System-Level Authentication Guide.
11.1.2. Mounting Home Directories Manually
/home/directory that will be available to all machines in the IdM domain, and then mount the directory on an IdM machine using the
Potential Problems When Using NFS
/home/directory tree, or network performance issues for using remote servers for home directories.
automountto mount only the user's home directory and only when the user logs in. Do not use it to load the entire
- Use a remote user who has limited permissions to create home directories, and mount the share on the IdM server as this user. Because the IdM server runs as an
httpdprocess, it is possible to use
sudoor a similar program to grant limited access to the IdM server to create home directories on the NFS server.
Configuring Home Directories Using NFS and
- Create a new location for the user directory maps.
$ ipa automountlocation-add userdirs Location: userdirs
- Add a direct mapping to the new location's
auto.directfile is the
automountmap automatically created by the
ipa-server-installutility. In the following example, the mount point is
$ ipa automountkey-add userdirs auto.direct --key=/share --info="-ro,soft, server.example.com:/home/share" Key: /share Mount information: -ro,soft, server.example.com:/home/share
automountwith IdM, see Chapter 34, Using Automount.