#3987 please add homedirectory overwrite for support for sssd [ifp]
Closed: cloned-to-github 3 years ago by pbrezina. Opened 5 years ago by jelledj.

I have the homedirectory half working, it is being passed to sssd and being used so that is kind good. I want to pass the altered homedirectory to ipsilon saml sp and map it to a specific service. (nextcloud data dir)

However sssd dbus call is not using the override_homedir even though the local client it self is using it:

getent passwd jdejong
jdejong:*:350600021:350600021:Jelle de Jong:/mnt/nfs/home/jdejong:/bin/bash

I attached my sssd.conf

It would be really useful if I can pass an homedirectory to /mnt/nfs/home/%u/.nextcloud/

gdbus call        --system        --dest org.freedesktop.sssd.infopipe        --object-path /org/freedesktop/sssd/infopipe/Users/example_2elocal/350600021        --method org.freedesktop.DBus.Properties.Get        "org.freedesktop.sssd.infopipe.Users.User" "extraAttributes"
(<{'mail': ['jdejong@mctest.nl'], 'postalCode': ['ss'], 'sn': ['de Jong'], 'street': ['ss'], 'givenname': ['Jelle'], 'homedirectory': ['/home/jdejong'], 'locality': ['ss'], 'st': ['Nederland'], 'telephoneNumber': ['ss']}>,)
[domain/example.local]

id_provider = ipa
ipa_server = _srv_, freeipa01.example.local
ipa_domain = example.local
ipa_hostname = ipsilon03.example.local
auth_provider = ipa
chpass_provider = ipa
access_provider = ipa
cache_credentials = True
ldap_tls_cacert = /etc/ipa/ca.crt
krb5_store_password_if_offline = True
override_homedir = /mnt/nfs/home/%u
ldap_user_extra_attrs = mail, street, locality, st, postalCode, telephoneNumber, givenname, sn

[sssd]
services = ifp, nss, sudo, pam, ssh
domains =example.local

[nss]
homedir_substring = /home

[pam]

[sudo]

[autofs]

[ssh]

[pac]

[ifp]
#override_homedirectory = /mnt/nfs/home/%u
user_attributes = +homedirectory, +mail, +street, +locality, +st, +postalCode, +telephoneNumber, +givenname, +sn
allowed_uids = ipsilon, root

[secrets]

[session_recording]

Hello. Just to clarify.

a) Is this a request for SSSD's infopipe to return the same string as nss for homedir? (so the override_homedir option would apply to both nss and ifp)

b) or is this a request to add new option for ifp to override homedir (separately from nss, so that nss and ifp can return different strings for homedir, if the option for ifp is set differently then the one for nss)?

Metadata Update from @pbrezina:
- Issue tagged with: Future milestone

4 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4959

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @pbrezina:
- Issue close_status updated to: cloned-to-github
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata