Commit graph

12 commits

Author SHA1 Message Date
Raphael Dannecker
14822ebb47 Revert "Switch to systemd automount ..." and "krb5.conf from ..."
SMB automount seems to have major problems with multiuser mounts.
For the first logged in user, everything seems to be fine.
For every following logged in user, strange things will happen (e.g. firefox has problems showing the webdev console).

This reverts following commits:
 - 9df6c93636 (Switch to systemd automount for /srv/samba/schools/default-school)
 - f08c06d7a6 (krb5.conf from package krb5-user ist require)
2025-07-28 10:32:07 +02:00
Raphael Dannecker
9df6c93636 Switch to systemd automount for /srv/samba/schools/default-school
Replaced pam_mount with systemd automount to manage the mounting of the default school Samba share.
This change improves system integration and simplifies the mount process by leveraging systemd's capabilities.
2025-07-16 08:02:37 +02:00
Raphael Dannecker
1abbc0d823 Configure SSSD for hourly ticket lifetime checks and renewal 2025-07-02 13:56:32 +02:00
Raphael Dannecker
9f1c60eefd Use variable instead of group membership to install localhome
Use variable localhome to determines whether the localhome module is installed.
Default: localhome=false

Further changes:
- Move pam-exec from common-auth to common-session
- Move pam-mkhomedir before pam-mount to avoid double login on first use
  on localhome devices
2025-03-19 11:08:57 +01:00
Andreas B. Mundt
77f4643628 Make tests for group membership more readable 2024-11-21 12:42:37 +01:00
Raphael Dannecker
e7916a5f30 Revert "Extends krb5-ticket renewable_lifetime for teacherlaptops, so there is no need to login every day."
This reverts commit 44f87537bb.
2024-07-10 07:59:44 +02:00
Raphael Dannecker
44f87537bb Extends krb5-ticket renewable_lifetime for teacherlaptops, so there is no need to login every day. 2024-07-07 10:58:27 +02:00
Raphael Dannecker
08f0f082fd Introduction of a new device class (localhome).
- user-home is on local disk
- additional entry in dolphin: home@server
- display info about localhome on login-screen
- provide unison-config for sync home with home@server
- force user to be logged out immediately after first login, because
  home-dir must exists for bind-mounts on /lmn/media
2024-04-28 19:37:13 +02:00
Andreas B. Mundt
5ed4c2a135 Attempt to shorten login time by ignoring group members.
This is seems to be the solution for larger groups.
2024-01-16 11:47:55 +01:00
Andreas B. Mundt
e57c9e5b5c Fix failing sssd-pac.service (#1037930). 2023-12-21 22:37:02 +01:00
Andreas B. Mundt
cb9f5fdb23 Skip time consuming VM syncing during installation, cleanup. 2023-02-18 10:22:46 +01:00
Andreas B. Mundt
0cc41715d8 Configure KDE, move package installation to extra role. 2023-02-07 19:18:57 +01:00