Hi jr
On 05/06/10 23:32, jr wrote:
> hi Tim,
>
>> V0.44 on Debian Lenny, home page at http://pam-mount.sourceforge.net/
>
> went to have a look, they're on 1.36 now.
>
Now up to 2.3. The usual Debian tradeoff of living with yesterday's
(hopefully better identified) bugs rather than today's (typically less
discovered) bugs!
> I had not known about 'pam_mount', interesting - I'll have to re-read
> the doc's and perhaps 'have a play' with it, not sure though I'd need
> it; my own use of PAM has been limited to what needed doing to make
> VMserver2 happy.
>
> I assume you are satisfied that the contents of '/etc/pam.d/*' on the
> multiuser Linux box are ok?
>
Yes, @include common-pammount at end of login and gdm and sshd.
>> ... The only irritation is that when the server is rebooted,
>> Linux users must run the share mounting script. This is pretty rare
>> (only when there's a kernel update every few months). The shares do
>> remain mounted between logins, so the pain isn't great.
>
> or, conditionally, run 'mount.cifs' from '~/.bash_login' or
> '~/.profile' perhaps?
>
>> I can see, at one level, why pam_mount requires SSH password
>> authentication, because it requires the password to authenticate to the
>> Samba shares, but I would have thought it would be possible to get over
>> this in some way ...
>
> have you read this in the faq? ("Q. Why does pam_mount not work right
> with OpenSSH?")
> http://pam-mount.git.sourceforge.net/git/gitweb.cgi?p=pam-mount/pam-mount;a=blob;hb=master;f=doc/faq.txt
>
No, I'd missed that one, but did have the relevant parameters correctly
set in /etc/ssh/sshd_config. I'm pretty sure that if I preservered I
could get SSH with password authentication working, but the real
question is whether it can be made to work with certificates.
Incidentally, while setting this up, I "discovered" SSHFS - can't
believe I'd been missing out on this little gem.
Cheers
Tim
--
Next meeting: Blandford Forum, Tuesday 2010-07-06 20:00
http://dorset.lug.org.uk/ http://www.linkedin.com/groups?gid=2645413
Chat: http://www.mibbit.com/?server=irc.blitzed.org&channel=%23dorset
List info: https://mailman.lug.org.uk/mailman/listinfo/dorset
