>>> On Wed, Oct 12, 2005 at 10:43 pm, in message
<434DC9B8.2030304@digitalhermit.com>, kwan@digitalhermit.com wrote:
> Hello All:
>
> I've been using OpenLDAP for authentication on a number of machines
for
> a while. It worked great for primarily text based logins. Recently
I've
> installed several Fedora Core 4 instances with full GUI and have been
> running into some issues with the shared home. These all seem
related
> to the shared home directory under NFS. Forexample:
>
> 1) Firefox prompts that another session is running if you login with
the
> same ID to different nodes and launch Firefox. You can create a new
> profile to get past this, but there's no easy way to configure a set
of
> plugins unique to each node.
>
> 2) Fluxbox fails to launch because a root- owned process cannot write
to
> a user home directory (nfs squashes the root permissions, as it
should).
>
> 3) Various applications drop the configuration files in ~/ as a
dotfile.
> It varies from application to application so no one method will
solve
> them all. I've done some things like create a script that launches
based
> on the hostname. This script (sourced via the user bash_profile) can
set
> host specific environment variables such as JAVA_HOME.
>
> For example:
>
> # User specific environment and startup programs
> LDAP_CURRENT_HOST=`hostname - s`
> if [ - f ~/.hostconfig/${LDAP_CURRENT_HOST}.profile ]; then
> . ~/.hostconfig/${LDAP_CURRENT_HOST}.profile
> fi
>
> This, however, does not work for applications that default to a
dotfile
> in the home directory.
>
> Anybody have any other solutions they're using for a shared home?
>
I have several customers that use SLES w/eDirectory to do this. Most
are using CIFS or NCP and not NFS. The problem we've found with OpenLDAP
is that it does not implement the full set of "LDAP v3" rfc's where
eDirectory does. There are some extensions in later LDAP rfc's that
address these issues with specific aux classes.
With our closed-source product, we make it real easy. SLES10 has some
features in it that will make this quite simple.
This link has some detail
http://www.novell.com/coolsolutions/feature/1640.html - but not to
the specifics you ask for above.
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:15:28 EDT