Amir Alexander Abdelbaki
76c3c2c1c5
usr_smb_r_<name> / usr_smb_rw_<name> (user groups): - Server creates /data/smb-shares/<name>/ with smb-<name> system user, setgid directory, and Samba share stanzas [usr-<name>-r/rw] on startup - Auto-generates credentials and stores them in IPA group descriptions (cifs://<host>:<samba-user>:<password>) so no out-of-band secret distribution - Client mounts //ipa/<share> at ~/‹name› for logged-in members; rw membership wins over r when user is in both groups - Revert: unmounts and rmdir the mount point on group leave dev_ssh_<userid> (host group): - Reads IPA user's SSH public keys (ipasshpubkey / --all output) - Writes them into /home/<userid>/.ssh/authorized_keys in an ansipa-managed section (preserves manually-added keys) - Home dir is created if it doesn't exist (user may not have logged in yet) - Revert: removes only the ansipa-managed section on group leave - Enables same-key SSH access from any registered device to enrolled hosts Also: add cifs-utils + openssh-server to Ansible package list Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01DHops6PU4c2Mv5UyhUj8Ms |
||
|---|---|---|
| .. | ||
| .env.example | ||
| Dockerfile | ||
| ansipa-check-scans.sh | ||
| ansipa-smb-setup.sh | ||
| ansipa-smb.service | ||
| docker-compose.yml | ||
| docker-env.service | ||
| ipa-first-boot.service | ||
| ipa-first-boot.sh | ||
| keycloak-configure.sh | ||
| run.sh | ||