RHEL SSSD AD CIFS mounting
by Ratmonkey from LinuxQuestions.org on (#4TQ2J)
Current setup:
2 x RHEL 7 Workstations (might upgrade to 8 soon)
1 x RHEL 8 Workstation test box (mine)
1 x Synology NAS configured with CIFS
I am attempting to provide support for a university lab, but have limited experience in implementing Linux in this kind of environment and we do not have a central IT service that supports workstation systems running Linux. So, I'm turning to you guys in hopes that you can help me accomplish the following.
I have been able to successfully get our RHEL 7 and 8 workstations onto our Active Directory domain using SSSD, and currently have users logging into the systems with their university credentials. Each user can then open the Gnome file manager and mount the NAS manually within the GUI. What we want to do, is have the workstations automatically mount the NAS using their university credentials upon login to Gnome on the computer. Essentially mimicking logging into a Windows box and running a script to automatically map a drive. I have read that this is further complicated because we are using CIFS, but that is a requirement due to having Windows machines that also need to be able to map to the NAS.
I have looked at a couple different ways to achieve this, and none are what I would consider "easy" and so far I haven't been able to implement them. One suggestion was to mount the space using "dummy credentials" to the root folder without any other write or traverse rights on the NAS, and then writing an expect script to somehow obtain the AD login credentials and pass those to the NAS. Honestly, I'm not sure how to accomplish that...
I've contacted Red Hat support, but thus far they have been less than helpful having only sent me a link to an article about autofs asking me to implement that, however they never gave me any direction about using an AD domain account.
Anyway, probably a total n00b question but it's not something I've been able to find concrete help with. Let me know if I can answer any questions to help come up with a complete answer.
Thanks,
2 x RHEL 7 Workstations (might upgrade to 8 soon)
1 x RHEL 8 Workstation test box (mine)
1 x Synology NAS configured with CIFS
I am attempting to provide support for a university lab, but have limited experience in implementing Linux in this kind of environment and we do not have a central IT service that supports workstation systems running Linux. So, I'm turning to you guys in hopes that you can help me accomplish the following.
I have been able to successfully get our RHEL 7 and 8 workstations onto our Active Directory domain using SSSD, and currently have users logging into the systems with their university credentials. Each user can then open the Gnome file manager and mount the NAS manually within the GUI. What we want to do, is have the workstations automatically mount the NAS using their university credentials upon login to Gnome on the computer. Essentially mimicking logging into a Windows box and running a script to automatically map a drive. I have read that this is further complicated because we are using CIFS, but that is a requirement due to having Windows machines that also need to be able to map to the NAS.
I have looked at a couple different ways to achieve this, and none are what I would consider "easy" and so far I haven't been able to implement them. One suggestion was to mount the space using "dummy credentials" to the root folder without any other write or traverse rights on the NAS, and then writing an expect script to somehow obtain the AD login credentials and pass those to the NAS. Honestly, I'm not sure how to accomplish that...
I've contacted Red Hat support, but thus far they have been less than helpful having only sent me a link to an article about autofs asking me to implement that, however they never gave me any direction about using an AD domain account.
Anyway, probably a total n00b question but it's not something I've been able to find concrete help with. Let me know if I can answer any questions to help come up with a complete answer.
Thanks,