On ma, 21 loka 2019, Matthias Salzmann via FreeIPA-users wrote:
Hello together
I'am a newby in Freeipa
I have a ( one-side ) cross-forrest trust with an Active Directory Domain.
AD user are able to login with ssh on the linux server. That works fine.
With sssd i am able to override the homedir. (override_homedir = /home/%u)
Unfortunately it is not possible to override the homedir with an additional variable.
Example: /home/%g/%u ( %g = $group )
The default group of each user should be included in homedir like
/home/merchandising/paul
In FreeIpa server i am able to override a user homedir with ID views but only for a single
user.
Does it anyone knows how i can override the homedir for a special group?
There is no
support for templated non-individual ID overrides right now.
I had done some design work in past and even a bit of a management
prototype on IPA side but we need actually to change SSSD to pull these
templated entries out of IPA LDAP server and apply them. The latter part
wasn't implemented yet.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland