On Tue, 23 Aug 2016, Thomas Beaudry wrote:
1. ssh to server (I have and AD credentials check working with
sssd
already)
2. automount a directory from a NAS on ssh login with sssd. What I would
like to be able to use is an auto.master file and an auto.data file to do
this and have the credentials provided via sssd. I was able to get this to
work without sssd (i.e just autofs and a credential file already), But the
server is going to be accessed by many users, so a credentials file isn't
the way to go about it.
NFS/CIFS with sec=krb5. User logs in either with a delegated kerberos
credential, or with a username and password.
autofs mounts a path with sec=krb5, and the user accessing it presents their
credential seamlessly for authentication.
NAS box would need to support kerberos for CIFS/NFS.
jh