Automount locations
Requires the automount module. The location, map and key structure, the standard on-demand home directory setup, enabling clients, and why the UI stops at locations.
This page covers the Automount locations page under Network services. It requires the automount module. Automount moves every host's /etc/auto.master and /etc/auto.home into the directory; the client's autofs reads them through sssd and mounts NFS on demand when a user enters /home/<uid>.
Three levels
| Level | autofs equivalent | Notes |
|---|---|---|
| location | One complete configuration | One per site or NFS server; a client picks one. default is shipped |
| map | One map file (auto.master, auto.home, auto.direct) | auto.master is the entry point, auto.direct holds direct mounts |
| key | One line of a map | In auto.master the key is the mount point and the value a map name; in other maps the key is a subdirectory and the value the mount info |
The standard on-demand home directory setup:
| location | map | key | Value |
|---|---|---|---|
default | auto.master | /home | auto.home |
default | auto.home | * | -fstype=nfs4,rw nfs01.linux.ipa.test:/export/home/& |
* matches any subdirectory and & substitutes the accessed name: /home/zhangwei mounts nfs01:/export/home/zhangwei. Mount options go before the value; -fstype=nfs4,sec=krb5 needs an nfs/ principal on the NFS server (Services).
UI and CLI
The 1.0.2 UI stops at the location list. Maps and keys are CLI:
ipa automountmap-add default auto.home
ipa automountkey-add default auto.master --key=/home --info=auto.home
ipa automountkey-add default auto.home --key='*' --info='-fstype=nfs4 nfs01.linux.ipa.test:/export/home/&'
ipa automountlocation-tofiles default # print the whole set in autofs file format
ipa automountlocation-import default /etc/auto.master # import from existing filesClient
ipa-client-automount --location=defaultThe command sets autofs_provider = ipa in sssd.conf and automount: sss files in nsswitch.conf, then starts autofs. After a map change, run sss_cache -A on the client or wait for the cache to expire.
Boundaries
| Topic | Notes |
|---|---|
| Default home | With NFS home directories, the default home /home on the Configuration page and the map's mount point must agree |
| Directory creation | Automount does not create directories. /export/home/<uid> must exist on the NFS server, or be created locally by oddjob-mkhomedir |
| Renaming a location | Not supported |
DNS
Requires the dns module. IPA's own DNS with zones, records, forward zones and forward policy, per-server forwarders and global config; how host records are maintained automatically, and why this group does not apply with IPA_SETUP_DNS=false.
Role-based access control (RBAC)
Delegating administration through the permission, privilege and role layers, what the shipped roles can do, giving a help desk a reset-password-only account, and how the admins group relates to RBAC.