<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 03/19/2015 05:29 AM, Roberto
Cornacchia wrote:<br>
</div>
<blockquote
cite="mid:CAFGv-=fOVaJCn8NTdE9oZ48Hsj+-c-FBjZkkR-ZYNDgnoTrjXA@mail.gmail.com"
type="cite">
<meta http-equiv="Context-Type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">On 6 March 2015 at 11:15, Martin
Kosek <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:mkosek@redhat.com" target="_blank">mkosek@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"><span class="">On 03/06/2015
10:56 AM, Roberto Cornacchia wrote:<br>
<blockquote class="gmail_quote">
Hi there,<br>
<br>
I'm planning to deploy freeIPA on our lan.<br>
It's small-ish and completely based on FC21, so I
expect everything to work<br>
like a charm.<br>
<br>
Except one detail. We have Synology NAS station, which
uses DSM 5.0.<br>
The ideal plan is to use it as host for shared NFS
home dirs once we switch our<br>
desktops to freeIPA.<br>
</blockquote>
<br>
</span>
Great!<span class=""><br>
<blockquote class="gmail_quote"><br>
</blockquote>
</span></blockquote>
<div><br>
</div>
<div>Hello,</div>
<div><br>
</div>
<div>The first thing I'm struggling with is to find the
correct approach about NFS home dirs.</div>
<div>The ideal setting would be:</div>
<div>- home dirs on the NAS</div>
<div>- IPA manages automount maps</div>
<div>- home dirs are created automatically at first login</div>
<div><br>
</div>
<div>The documentation I could find on these topics includes
only not-so-recent pages (anything I missed?):</div>
<div><br>
</div>
<div>
<div>
<div><a moz-do-not-send="true"
href="http://wiki.linux-nfs.org/wiki/index.php/NFS_and_FreeIPA">http://wiki.linux-nfs.org/wiki/index.php/NFS_and_FreeIPA</a><br>
</div>
<div><a moz-do-not-send="true"
href="http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/automount.html">http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/automount.html</a><br>
</div>
<div><a moz-do-not-send="true"
href="http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/users.html#home-directories">http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/users.html#home-directories</a><br>
</div>
<div><a moz-do-not-send="true"
href="http://adam.younglogic.com/2011/06/automount-and-home-directory-creation/">http://adam.younglogic.com/2011/06/automount-and-home-directory-creation/</a><br>
</div>
<div><br>
</div>
<div>Now, I admit I don't have much experience with
setting up NFS homes, with or without freeIPA, so
trying to get this done correctly in the context of
freeIPA and without clear howtos isn't very easy, but
I'm willing to get my hands dirty.</div>
</div>
</div>
<div><br>
</div>
<div>The first problem I struggle with is on the correct
approach. </div>
<div>From the documentation above, I understand that there
is a bit of a chicken-egg problem about the creation of
home dirs.</div>
<div>On the one hand, it would be optimal to have automount
maps to load only single home dirs on demand, rather than
the entire /home tree. </div>
<div>On the other hand, if the /home tree is not available,
then creating /home/user1 dir automatically isn't really
possible.</div>
<div><br>
</div>
<div>Just mounting the whole /home tree would make things
easier, but I don't have a feeling of when it starts to
become a performance issue (assuming recent hardware and
up to date software). 10 users? 50? 100? 500? No idea.</div>
<div>The realm I'm dealing with at the moment is in the
range of 5-10 users and probably won't be larger than 50
in the next few years (and if it will, it means things are
going well, so what the heck ;)</div>
<div>Also true that, with such few users, I could just
create the homedirs manually when needed (this is not an
organisation where many users come and go) and just mount
the individually.</div>
<div>Any tips about this?</div>
<div><br>
</div>
<div>Best, Roberto</div>
<div><br>
</div>
<div> </div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
Some of these questions are really outside the scope of this list.<br>
You might consider asking them on the NFS list.<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>