In the case of a cluster that reuses an existing /home filesystem on CephFS with an external LDAP, it could be desirable to support oddjob-mkhomedir to create home directories on first login
This requires:
- Ensuring that yum pkg
oddjob-mkhomedir is installed (it usually is, but just in case)
- Adding
session optional pam_oddjob_mkhomedir.so debug umask=0077 to /etc/pam.d/password-auth and /etc/pam.d/system-auth
- Ensuring that the
oddjobd service is running
- Possibly notifying
dbus and sssd
This could be added as a boolean $mkhomedir in https://github.com/ComputeCanada/puppet-magic_castle/blob/main/site/profile/manifests/sssd.pp#L1
In the case of a cluster that reuses an existing /home filesystem on CephFS with an external LDAP, it could be desirable to support
oddjob-mkhomedirto create home directories on first loginThis requires:
oddjob-mkhomediris installed (it usually is, but just in case)session optional pam_oddjob_mkhomedir.so debug umask=0077to/etc/pam.d/password-authand/etc/pam.d/system-authoddjobdservice is runningdbusandsssdThis could be added as a boolean
$mkhomedirin https://github.com/ComputeCanada/puppet-magic_castle/blob/main/site/profile/manifests/sssd.pp#L1