Autofs Entries Caching

[Douglas Duckworth]

Hi

We have autofs working great with sssd thanks to support of this listserv.

Though during testing we noticed that only home directories, for users who
had previously logged into a given server, were cached by the sssd client.
Can sssd cache autofs for all users in our directory even if they haven't
recently logged into a server?

Here's our current config for autofs portion:

autofs_provider = ldap
ldap_autofs_search_base = ou=autofs.maps,cn=server,ou=machines,dc=blah
ldap_autofs_map_master_name = autofs.maps
ldap_autofs_map_object_class = automountMap
ldap_autofs_entry_object_class = automount
ldap_autofs_map_name = ou
ldap_autofs_entry_key = cn
ldap_autofs_entry_value = automountInformation
ldap_deref = always

Thanks
Doug

Thanks,

Douglas Duckworth, MSc, LFCS
HPC System Administrator
Scientific Computing Unit
Physiology and Biophysics
Weill Cornell Medicine
E: [e-mail]
O: 212-746-6305
F: 212-746-8690

[Jakub Hrozek]

On Mon, Jul 24, 2017 at 11:31:51AM -0400, Douglas Duckworth wrote:
> Hi
>
> We have autofs working great with sssd thanks to support of this listserv.
>
> Though during testing we noticed that only home directories, for users who
> had previously logged into a given server, were cached by the sssd client.
> Can sssd cache autofs for all users in our directory even if they haven't
> recently logged into a server?
>
> Here's our current config for autofs portion:
>
> autofs_provider = ldap
> ldap_autofs_search_base = ou=autofs.maps,cn=server,ou=machines,dc=blah
> ldap_autofs_map_master_name = autofs.maps
> ldap_autofs_map_object_class = automountMap
> ldap_autofs_entry_object_class = automount
> ldap_autofs_map_name = ou
> ldap_autofs_entry_key = cn
> ldap_autofs_entry_value = automountInformation
> ldap_deref = always

In general, sssd only caches what automounter asks for. IIRC automounter
would ask at least for the master map and the nested maps after
startups, but I don't know how that works with keys, especially with
(presumably?) wildcard keys you might be using for home dirs..

I'm not sure how else to trigger automounter into explicitly querying
the keys other than forcing access to the directories, sorry.

[Ondrej Valousek]

I think autofs reads all maps upon a start and then, based on the timeout variable, updates entries in the indirect maps.
Master map is read only once, upon autofs start - so I guess you might be in trouble if you are only using direct maps.
Ondrej
> -----Original Message-----
> From: Jakub Hrozek [mailto:[e-mail]]
> Sent: Tuesday, July 25, 2017 8:33 AM
> To: [e-mail]
> Subject: [SSSD-users] Re: Autofs Entries Caching
>
> On Mon, Jul 24, 2017 at 11:31:51AM -0400, Douglas Duckworth wrote:
> > Hi
> >
> > We have autofs working great with sssd thanks to support of this listserv.
> >
> > Though during testing we noticed that only home directories, for users
> > who had previously logged into a given server, were cached by the sssd
>
> client.
> > Can sssd cache autofs for all users in our directory even if they
> > haven't recently logged into a server?
> >
> > Here's our current config for autofs portion:
> >
> > autofs_provider = ldap
> > ldap_autofs_search_base =
>
> ou=autofs.maps,cn=server,ou=machines,dc=blah
> > ldap_autofs_map_master_name = autofs.maps
>
> ldap_autofs_map_object_class
> > = automountMap ldap_autofs_entry_object_class = automount
> > ldap_autofs_map_name = ou ldap_autofs_entry_key = cn
> > ldap_autofs_entry_value = automountInformation ldap_deref = always
>
> In general, sssd only caches what automounter asks for. IIRC automounter
> would ask at least for the master map and the nested maps after startups, but
> I don't know how that works with keys, especially with
> (presumably?) wildcard keys you might be using for home dirs..
>
> I'm not sure how else to trigger automounter into explicitly querying the keys
> other than forcing access to the directories, sorry.
> _______________________________________________
> sssd-users mailing list -- [e-mail] To unsubscribe
> send an email to [e-mail]

-----

The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: [e-mail]. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.