[FreeNX-kNX] NX and PAM, a complex one...

[Chris Fanning]

>>> On s SuSE11 (running KIWI/LTSP) I use pam.d/common-session-pc to mount
>>> the users private win-share when they are loggin in. I use the
>>> pam_mount.so module in the config file of which, I defined the win-mount
>>> and all.

just a thought.
I had been using pam_mount for a couple of years like this but it has
(or at least did have) a problem umounting the shares when the user
closes the ssh session. It does workr but you end up with lots of cifs
mounts on the host. It is widely reported on the net.
I stopped using it and now use pam-script instead. pam-script allows
you to run bash scripts to do your mounting, umounting and anything
else you script.
It works well.
http://gatopelao.org/?desktop_image:pam_script

Cheers.
Chris.

On Wed, Jan 7, 2009 at 10:19 PM, Verner Kjærsgaard <vk at os-academy.dk> wrote:
>
>
> Chris Fanning skrev:
>> On Sun, Dec 14, 2008 at 9:14 PM, Verner Kjærsgaard <vk at os-academy.dk> wrote:
>>> Hi list and gurus
>>>
>>> I'm kinda stuck here. This is my situation:
>>>
>>> On s SuSE11 (running KIWI/LTSP) I use pam.d/common-session-pc to mount
>>> the users private win-share when they are loggin in. I use the
>>> pam_mount.so module in the config file of which, I defined the win-mount
>>> and all.
>>>
>>> This works fine.
>>>
>>> Now, when a user logs in from outside, using FreeNX, things break. They
>>> do so, because the user originally comes in as user NX with the
>>> NoMachine keys and so. Finally the actual user, let's name him "benny"
>>> is logged as if he came from localhost. Am I right?
>>>
>>> This (ssh) and the initial nx login confuses me, I'm lost as to how to
>>> get windows shares (auto)mounted when users a coming in from outside.
>>>
>>> Any hints ?? :-)
>>
>> Hi,
>>
>> Try /etc/pam.d/ssh
>> Using LDAP, it looks like this.
>>
>> # Standard Un*x authentication.
>> #@include common-auth
>> account sufficient  pam_ldap.so
>> auth      required    pam_mount.so
>> auth      sufficient  pam_ldap.so use_first_pass
>> auth      required    pam_unix.so nullok_secure use_first_pass
>> session optional    pam_mount.so
>>
>> Cheers.
>> Chris.
>>> --
>>> ------------------------------
>>> Med venlig hilsen/Best regards
>>> Verner Kjærsgaard
>>>
>>> ________________________________________________________________
>>>     Were you helped on this list with your FreeNX problem?
>>>    Then please write up the solution in the FreeNX Wiki/FAQ:
>>>
>>> http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
>>>
>>>         Don't forget to check the NX Knowledge Base:
>>>                 http://www.nomachine.com/kb/
>>>
>>> ________________________________________________________________
>>>       FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>>>      https://mail.kde.org/mailman/listinfo/freenx-knx
>>> ________________________________________________________________
>>>
>> ________________________________________________________________
>>      Were you helped on this list with your FreeNX problem?
>>     Then please write up the solution in the FreeNX Wiki/FAQ:
>>
>> http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
>>
>>          Don't forget to check the NX Knowledge Base:
>>                  http://www.nomachine.com/kb/
>>
>> ________________________________________________________________
>>        FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>>       https://mail.kde.org/mailman/listinfo/freenx-knx
>> ________________________________________________________________
>>
> THANK YOU!
> - will keep the list/wiki informed!
>
>
>
> --
> ------------------------------
> Med venlig hilsen/Best regards
> Verner Kjærsgaard
> ________________________________________________________________
>     Were you helped on this list with your FreeNX problem?
>    Then please write up the solution in the FreeNX Wiki/FAQ:
>
> http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
>
>         Don't forget to check the NX Knowledge Base:
>                 http://www.nomachine.com/kb/
>
> ________________________________________________________________
>       FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>      https://mail.kde.org/mailman/listinfo/freenx-knx
> ________________________________________________________________
>