blob: 4fa5f36a15d14063e9b99248df657b9c550a20e3 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
###################################################################
#
# This script is a part of the pam_script_ses_open script
# and is not stand-alone!
#
if ! grep -q "^${PAM_USER}:" "/etc/passwd"; then
if [ -z "$VOLUME" -o -z "$REAL_ACCOUNT" ]; then
# determine fileserver and share for home directories
touch "/tmp/ldapsearch.${PAM_USER}"
chmod 0600 "/tmp/ldapsearch.${PAM_USER}"
ldapsearch -x -LLL uid="${PAM_USER}" homeMount realAccount > "/tmp/ldapsearch.${PAM_USER}" 2>/dev/null || \
{ slxlog "pam-ad-ldapquery" "Could not query LDAP server for parameters of user '${PAM_USER}'."; exit 1; }
VOLUME=$(cat "/tmp/ldapsearch.${PAM_USER}" | grep ^homeMount | head -n 1 | cut -d" " -f2)
[ -z "${VOLUME}" ] && slxlog "pam-ad-ldapvolume" "LDAP server did not provide 'homeMount'. Aborting mount for ${PAM_USER}." && exit 1
[ -z "$REAL_ACCOUNT" ] && REAL_ACCOUNT=$(cat "/tmp/ldapsearch.${PAM_USER}" | grep ^realAccount | head -n 1 | cut -d" " -f2)
[ -z "$REAL_ACCOUNT" ] && REAL_ACCOUNT="$PAM_USER"
fi
MOUNT_OPTS="-v -t cifs -o uid=${USER_UID},gid=${USER_GID},forceuid,forcegid,sec=ntlm"
SIGNAL=$(mktemp)
rm -f -- "${SIGNAL}"
export USER="${REAL_ACCOUNT}"
export PASSWD="${PAM_AUTHTOK}"
( mount ${MOUNT_OPTS} "${VOLUME}" "${PERSISTENT_HOME_DIR}" > "/tmp/home.$PAM_USER" 2>&1 || touch "${SIGNAL}" ) &
MOUNT_PID=$!
for COUNTER in 1 2 4 4; do
kill -0 "${MOUNT_PID}" 2>/dev/null || break
sleep "${COUNTER}"
done
if [ -e "${SIGNAL}" ]; then
slxlog "pam-ad-mount" "Mount of '${VOLUME}' to '${PERSISTENT_HOME_DIR}' failed. (Args: ${MOUNT_OPTS})" "/tmp/home.$PAM_USER"
sleep 1
rm -f -- "${SIGNAL}"
elif kill -9 "${MOUNT_PID}" 2>/dev/null; then
slxlog "pam-ad-mount" "Mount of '${VOLUME}' to '${PERSISTENT_HOME_DIR}' timed out. (Args: ${MOUNT_OPTS})" "/tmp/home.$PAM_USER"
sleep 1
else
PERSISTENT_OK=yes
chmod -R u+rw "${PERSISTENT_HOME_DIR}" 2>/dev/null
fi
unset USER
unset PASSWD
rm -f -- "/tmp/home.$PAM_USER"
fi
|
