Amir Alexander Abdelbaki
76c3c2c1c5
usr_smb_r_<name> / usr_smb_rw_<name> (user groups): - Server creates /data/smb-shares/<name>/ with smb-<name> system user, setgid directory, and Samba share stanzas [usr-<name>-r/rw] on startup - Auto-generates credentials and stores them in IPA group descriptions (cifs://<host>:<samba-user>:<password>) so no out-of-band secret distribution - Client mounts //ipa/<share> at ~/‹name› for logged-in members; rw membership wins over r when user is in both groups - Revert: unmounts and rmdir the mount point on group leave dev_ssh_<userid> (host group): - Reads IPA user's SSH public keys (ipasshpubkey / --all output) - Writes them into /home/<userid>/.ssh/authorized_keys in an ansipa-managed section (preserves manually-added keys) - Home dir is created if it doesn't exist (user may not have logged in yet) - Revert: removes only the ansipa-managed section on group leave - Enables same-key SSH access from any registered device to enrolled hosts Also: add cifs-utils + openssh-server to Ansible package list Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01DHops6PU4c2Mv5UyhUj8Ms |
||
|---|---|---|
| .. | ||
| ansible | ||
| image | ||
| auto-enroll-ansible.sh | ||
| copilot-explains.txt | ||
| freeipa-client-answerfile.json | ||
| freeipa-client.sh | ||
| freeipa-enroll.sh | ||