autofs for different audiences or device types

[Brendan Kearney]

i want to run different automounts for users on workstations or laptops
vs users logging into servers.  also, i would like certain processes to
have different automounts.

say i have a user, and the user automounts server:/directory
under /home/user/localdir when logged into their daily-driver device.
when that user logs into a server, i dont want that user to get the
automount.  how are people differentiating automounts for a given
audience?

i figure i could create different automountMaps and point the particular
devices to specific maps, but is there a way to have all configs be the
same and have the differentiation done in LDAP?

say all devices point to one auto.master and get direct and/or indirect
mappings from one place.  is there a way to add criteria for which
mappings are returned?  you only get these keys if you are in this ip
range or you only get those keys if the DNS name of the client machine
is "host.domain.tld"?

is it just easier to have different auto.masters for the different
devices or audience i want to manage?

thank you,

brendan

[Dmitri Pal]

On 03/17/2015 11:03 AM, Brendan Kearney wrote:
> i want to run different automounts for users on workstations or laptops
> vs users logging into servers.  also, i would like certain processes to
> have different automounts.
>
> say i have a user, and the user automounts server:/directory
> under /home/user/localdir when logged into their daily-driver device.
> when that user logs into a server, i dont want that user to get the
> automount.  how are people differentiating automounts for a given
> audience?
>
> i figure i could create different automountMaps and point the particular
> devices to specific maps, but is there a way to have all configs be the
> same and have the differentiation done in LDAP?

I do not think it is possible.
> say all devices point to one auto.master and get direct and/or indirect
> mappings from one place.  is there a way to add criteria for which
> mappings are returned?  you only get these keys if you are in this ip
> range or you only get those keys if the DNS name of the client machine
> is "host.domain.tld"?

IP and DNS are not reliable due to gateways and firewalls.
> is it just easier to have different auto.masters for the different
> devices

This is the only option available now.
> or audience i want to manage?
>
> thank you,
>
> brendan
>
> sssd-users mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users

[Jakub Hrozek]

On Tue, Mar 17, 2015 at 02:45:08PM -0400, Dmitri Pal wrote:
> On 03/17/2015 11:03 AM, Brendan Kearney wrote:
> > i want to run different automounts for users on workstations or laptops
> > vs users logging into servers.  also, i would like certain processes to
> > have different automounts.
> >
> > say i have a user, and the user automounts server:/directory
> > under /home/user/localdir when logged into their daily-driver device.
> > when that user logs into a server, i dont want that user to get the
> > automount.  how are people differentiating automounts for a given
> > audience?
> >
> > i figure i could create different automountMaps and point the particular
> > devices to specific maps, but is there a way to have all configs be the
> > same and have the differentiation done in LDAP?
>
> I do not think it is possible.

I can't think of any way either. But you might have better luck asking
on the autofs-specific lists. After all, sssd is more or less just a
proxy when it comes to caching the autofs data.