Learn how easy it is to sync an existing GitHub or Google Code repo to a SourceForge project! See Demo

Close

#8 integrate smbnetfs with pam

open
None
5
2009-05-01
2009-04-27
muzzol
No

this is a feature request.

i would like to see a seamless smb browsing without any need for file credentials.

this is specially usefull for wide environments (schools, departments, etc).

pam could provide auth token to default login:

auth "$userid" "$authtoken"

and allow additional entries as usual in the conf files.

there's some workarounds for this that implies using pam_script and creating a temporary auth file, but this is insecure, ineficient and ugly.

Discussion

  • I'll look on it closely after SMBNetFS-0.5.0 release.

     
    • assigned_to: nobody --> kshevetskiy
     
  • muzzol
    muzzol
    2009-06-18

    which amount of donation could help to increase priority on this issue?

     
  • muzzol
    muzzol
    2009-12-30

    sorry for bumping.

    kshevetskiy, do you have any plans on this issue?

    im really interested

     
  • yes, i'am really interested in it.
    Unfortunately, i have a lack of free time.
    So if i not fix it until Jan 10 (end of New Year holidays in Russia), it might takes a much longer.

     
  • PS: it's not possible to donate me using PayPal, as i am living in Russia ;-(

     
  • muzzol
    muzzol
    2010-01-05

    then i'll have to invite you to come to mallorca and take some beers :)

     
  • I do not catch an idea of pam usage. Could you point me to workaround that uses pam_script and temporary auth file? The only solution i can imagine is an ugly hack that store user password during login process and report it to smbnetfs on request. This approach is brain damaged as it breaks pam policy.

    From my point of view the kwallet or gnome-keyring looks much more attractive for this kind of task.

     
  • muzzol
    muzzol
    2010-01-08

    that ugly hack you're describing seems very similar to my script.

    i don't have it here right now, but is as simple as store password and username in a file and then a second script to parse it and create the smbnetfs.auth file.

    gnome-keyring solution sounds great also because is already integrated with default ubuntu desktop configuration.

     
  • muzzol
    muzzol
    2010-01-08

    you could also take a look at

    http://pam-mount.sourceforge.net/doc.php

    this module is also for mounting filesystems with fuse and other mechanisms