1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
#!/bin/ash - sourced by exec_auth
[ -z "$NETWORK_HOME" ] && return
OPTION_LIST="$HOME_MOUNT_OPTS"
EXTRA_OPTS=
if [ "${NETWORK_HOME:0:2}" = "//" ]; then
# CIFS
MOUNT="cifs"
if [ -z "$OPTION_LIST" ]; then
# No opts given, determine list of options we'll try
# TODO: Kerberos? How? cruid...
OPTION_LIST="vers=3.0,sec=ntlmssp vers=2.1,sec=ntlmssp vers=1.0,sec=ntlm vers=3.0,sec=ntlmv2 vers=1.0,sec=ntlmv2 vers=3.0,sec=ntlm vers=2.0,sec=ntlmssp #"
EXTRA_OPTS="forceuid,forcegid,nounix,file_mode=0700,dir_mode=0700,noacl,nobrl"
fi
else
# Assume NFS? Leave empty, should work for NFS too
MOUNT=
if [ -n "$PAM_KRB5CCNAME" ]; then
export KRB5CCNAME="$PAM_KRB5CCNAME"
[ -z "$OPTION_LIST" ] && OPTION_LIST="sec=krb5 #"
fi
fi
[ -z "$OPTION_LIST" ] && OPTION_LIST="#"
if [ "$MOUNT" = "cifs" ]; then
# Most servers can work without, but some don't
XDOMAIN=
if [ -n "$LDAP_BASE" ]; then
XDOMAIN=$( echo "$LDAP_BASE" | grep -o -E -i 'DC=([^,;]+)' | head -n 1 | cut -c 4- )
fi
if [ -z "$SHARE_DOMAIN" ]; then
XDOMAIN="$XDOMAIN #"
fi
export USER="${REAL_ACCOUNT}"
export PASSWD="${USER_PASSWORD}"
else
XDOMAIN="#"
fi
LOGFILES=
PIDS=
CNT=0
for opt in $OPTION_LIST; do
# try with and without explicit domain argument
for dom in $SHARE_DOMAIN $XDOMAIN; do # No quotes
CNT=$(( CNT + 1 ))
FILE=$(mktemp)
LOGFILES="$LOGFILES $FILE"
COMMAND_LINE="-v"
OPTS=
if [ "$MOUNT" = "cifs" ]; then
COMMAND_LINE="$COMMAND_LINE -t cifs"
OPTS="${OPTS},uid=${USER_UID},gid=${USER_GID}"
fi
[ -n "$EXTRA_OPTS" ] && OPTS="${OPTS},${EXTRA_OPTS}"
[ "x$dom" != "x#" ] && OPTS="${OPTS},domain=$dom"
[ "x$opt" != "x#" ] && OPTS="${OPTS},$opt"
OPTS=${OPTS:1}
echo " ****** Trying '$OPTS'" > "$FILE"
[ -n "$OPTS" ] && COMMAND_LINE="$COMMAND_LINE -o ${OPTS}"
mount ${COMMAND_LINE} "${NETWORK_HOME}" "${PERSISTENT_HOME_DIR}" >> "${FILE}" 2>&1 &
PID=$!
# Wait max. 1 second; remember PID if this mount call seems to be running after we stop waiting
for waits in 1 2 3 4; do
usleep 250000
if isHomeMounted; then
# A previously invoked mount call might have succeeded while this one is still running; try to stop it right away
kill "$PID" &> /dev/null
break 3
fi
kill -0 "$PID" || break
done
kill -0 "$PID" && PIDS="$PIDS $PID" # Remember all PIDs
done
done
unset USER
unset PASSWD
if [ -n "$PIDS" ]; then
CNT=0
while ! isHomeMounted && [ "$CNT" -lt 10 ] && kill -0 $PIDS; do # No quotes
usleep 333000
CNT=$(( CNT + 1 ))
done
kill -9 $PIDS # Kill any leftovers; No quotes
fi
if ! isHomeMounted; then
LOG_COMBINED=$(mktemp)
[ -n "$LOGFILES" ] && cat ${LOGFILES} > "$LOG_COMBINED" # No quotes
slxlog --delete "pam-ad-mount" "Mount of '${NETWORK_HOME}' to '${PERSISTENT_HOME_DIR}' failed." "${LOG_COMBINED}"
fi
[ -n "${LOGFILES}" ] && rm -f -- ${LOGFILES} # No quotes
true
|
