[FreeNX-kNX] NX and PAM, a complex one...

[Verner Kjærsgaard]

Chris Fanning skrev:
>>>> On s SuSE11 (running KIWI/LTSP) I use pam.d/common-session-pc to mount
>>>> the users private win-share when they are loggin in. I use the
>>>> pam_mount.so module in the config file of which, I defined the win-mount
>>>> and all.
> 
> just a thought.
> I had been using pam_mount for a couple of years like this but it has
> (or at least did have) a problem umounting the shares when the user
> closes the ssh session. It does workr but you end up with lots of cifs
> mounts on the host. It is widely reported on the net.
> I stopped using it and now use pam-script instead. pam-script allows
> you to run bash scripts to do your mounting, umounting and anything
> else you script.
> It works well.
> http://gatopelao.org/?desktop_image:pam_script
> 
> Cheers.
> Chris.
> 
> On Wed, Jan 7, 2009 at 10:19 PM, Verner Kjærsgaard <vk at os-academy.dk> wrote:
>>
>> Chris Fanning skrev:
>>> On Sun, Dec 14, 2008 at 9:14 PM, Verner Kjærsgaard <vk at os-academy.dk> wrote:
>>>> Hi list and gurus
>>>>
>>>> I'm kinda stuck here. This is my situation:
>>>>
>>>> On s SuSE11 (running KIWI/LTSP) I use pam.d/common-session-pc to mount
>>>> the users private win-share when they are loggin in. I use the
>>>> pam_mount.so module in the config file of which, I defined the win-mount
>>>> and all.
>>>>
>>>> This works fine.
>>>>
>>>> Now, when a user logs in from outside, using FreeNX, things break. They
>>>> do so, because the user originally comes in as user NX with the
>>>> NoMachine keys and so. Finally the actual user, let's name him "benny"
>>>> is logged as if he came from localhost. Am I right?
>>>>
>>>> This (ssh) and the initial nx login confuses me, I'm lost as to how to
>>>> get windows shares (auto)mounted when users a coming in from outside.
>>>>
>>>> Any hints ?? :-)
>>> Hi,
>>>
>>> Try /etc/pam.d/ssh
>>> Using LDAP, it looks like this.
>>>
>>> # Standard Un*x authentication.
>>> #@include common-auth
>>> account sufficient  pam_ldap.so
>>> auth      required    pam_mount.so
>>> auth      sufficient  pam_ldap.so use_first_pass
>>> auth      required    pam_unix.so nullok_secure use_first_pass
>>> session optional    pam_mount.so
>>>
>>> Cheers.
>>> Chris.
>>>> --

Hi list and Chris,

- I'll investigate and get back. Right now, I'm stuck with a BAD ltsp 
problem...see my posting :-)


-- 
------------------------------
Med venlig hilsen/Best regards
Verner Kjærsgaard
Open Source Academy
+45 56964223

Novell Certified Linux
Professional 10035701
------------------------------