rc/classroom
5
0
Fork 4
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Do not mount cifs volumes for local users; disable debug

Browse source
This commit is contained in:
Gašper Fele-Žorž 2025-09-01 00:21:18 +02:00
parent 957cd67eb7
commit c5754dece2
1 changed files with 19 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

21
roles/ad_joined/files/pam_mount.conf.xml
View file

@ -3,18 +3,35 @@
<pam_mount>
<!-- Example using CIFS -->
<debug enable="0" />
<volume
fstype="cifs"
server="ucilnicesmb.fri1.uni-lj.si"
path="%(USER)"
mountpoint="~/"
options="sec=krb5i,cruid=%(USERUID)"
/>
>
<not>
<or>
<user>local_admin</user>
<user>root</user>
<sgrp>sudo</sgrp>
</or>
</not>
</volume>
<volume
fstype="cifs"
server="ucilnicesmb.fri1.uni-lj.si"
path="profiles/%(DOMAIN_USER).V6"
mountpoint="~/win_profile"
options="sec=krb5i,cruid=%(USERUID)"
/>
>
<not>
<or>
<user>local_admin</user>
<user>root</user>
<sgrp>sudo</sgrp>
</or>
</not>
</volume>
</pam_mount>