[Pam-mount-devel] pam-service configuration - pam_mount.conf with different users

[Helge Hansemann]

Hi,

I'm working with pam-mount rpm from SuSE9.0 on the client and a Novell 
Server exporting some directories via SMB.

User authentication via LDAP.

Two topics:

1) The following pam configuration, e.g. for the login service does not 
work:

   auth required pam_mount.so
   auth sufficient pam_ldap.so use_first_pass
   ...
   session sufficient pam_mount.so

If I put it this way it's OK:

   auth required pam_ldap.so
   auth sufficient pam_mount.so
   ...
   session sufficient pam_mount.so

What happens with the user name and the password in the first case?

Does pam_mount.so a checking against the Novel ldap direcetory like 
pam_ldap.so does?
If it does, is there an encryption or is the password passed in clear 
text to the ldap server?

Is it passed correctly to the pam_ldap.so, or why could this (first) 
configuration fail?

2) pam_mount.conf - different users

If i use this line

   volume thatsme smb server volume /home/thatsme/mnt - - -

it works quite fine. Messeges loke like this:

   pam_mount: --------
   pam_mount: checking to see if //server/volume is already mounted
   pam_mount: checking for encrypted filesystem key configuration
   pam_mount: about to start building mount command
   pam_mount: mount type is SMBMOUNT
   pam_mount: arg is: /bin/mount
   pam_mount: waiting for homedir mount
   pam_mount: arg is: mount
   pam_mount: arg is: -t
   pam_mount: arg is: smbfs
   pam_mount: arg is: //server/volume
   pam_mount: arg is: /home/thatsme/mnt
   pam_mount: arg is: -o
   pam_mount: arg is: username=thatsme

Now for different users, I use

   volume * smb server volume /home/&/mnt - - -

which does not work: --> Messages:

   pam_mount: adding to command: /usr/bin/lsof
   lsof

   pam_mount: reading options_allow...
   pam_mount: options:
   nosuid
   nodev
   pam_mount: reading options_require...
   pam_mount: options:
   nosuid
   nodev
   pam_mount: adding to command: /bin/mount
   mount
   -t
   smbfs

   pam_mount: adding to command: /bin/umount
   umount

   pam_mount: checking sanity of volume record
   pam_mount: back from global readconfig
   pam_mount:  does not exist or is not owned by user
   pam_mount: expand_wildcard for volume
   pam_mount: error expanding configuration

How can I get the login username to be used as the username inside the 
mount command. The expanding of the "&" works.


Maybe someone has an idea what causes this trouble. Thanks for any help,

Helge Hansemann