On pe, 28 elo 2020, Giulio Casella wrote:
The goal is to create users' home directory.
My setup is a (existing) AD architecture, with FreeIPA trusted with it.
Linux workstations (Fedora based) are joined to ipa, authentication
and authorization work great, but I've no way to auto create home
directory for them.
I was thinking to (nightly) run a script that list AD users and create
unexisting home directories (mkhomedir_helper). Doing it by hand is
not a way, users are tens of thousands.
So you mean the only way is to interact with AD guys (argh!)?
I assume that by 'home directories' above you are refering to
network-mounted home directories. Is that correct?
For local home directories a combination of oddjob and
pam_mkhomedir_oddjob already takes care for autocreating the directories
at logon time.
In Fedora this is set with
authselect enable-feature with-mkhomedir
when sssd profile is chosen.
On 26/08/2020 19:07, Alexander Bokovoy via FreeIPA-users wrote:
>On ke, 26 elo 2020, Giulio Casella via FreeIPA-users wrote:
>>I have a FreeIPA setup, in trust with an AD domain.
>>Is there a way to list trusted users (e.g. belonging to AD domain)
>>using FreeIPA (for instance with api)?
>>I only managed to list local users only (currently only "admin"
>>user in my setup).
>>I have no access to AD domain, so I can only perform operation in IPA.
>No, it is not available and not possible to list. What would be a reason
>for listing potentially unbound list of users that aren't exist in
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland