#8 integrate smbnetfs with pam

open
None
5
2009-05-01
2009-04-27
muzzol
No

this is a feature request.

i would like to see a seamless smb browsing without any need for file credentials.

this is specially usefull for wide environments (schools, departments, etc).

pam could provide auth token to default login:

auth "$userid" "$authtoken"

and allow additional entries as usual in the conf files.

there's some workarounds for this that implies using pam_script and creating a temporary auth file, but this is insecure, ineficient and ugly.

Discussion

  • Mikhail Kshevetskiy

    I'll look on it closely after SMBNetFS-0.5.0 release.

     
  • Mikhail Kshevetskiy

    • assigned_to: nobody --> kshevetskiy
     
  • muzzol

    muzzol - 2009-06-18

    which amount of donation could help to increase priority on this issue?

     
  • muzzol

    muzzol - 2009-12-30

    sorry for bumping.

    kshevetskiy, do you have any plans on this issue?

    im really interested

     
  • Mikhail Kshevetskiy

    yes, i'am really interested in it.
    Unfortunately, i have a lack of free time.
    So if i not fix it until Jan 10 (end of New Year holidays in Russia), it might takes a much longer.

     
  • Mikhail Kshevetskiy

    PS: it's not possible to donate me using PayPal, as i am living in Russia ;-(

     
  • muzzol

    muzzol - 2010-01-05

    then i'll have to invite you to come to mallorca and take some beers :)

     
  • Mikhail Kshevetskiy

    I do not catch an idea of pam usage. Could you point me to workaround that uses pam_script and temporary auth file? The only solution i can imagine is an ugly hack that store user password during login process and report it to smbnetfs on request. This approach is brain damaged as it breaks pam policy.

    From my point of view the kwallet or gnome-keyring looks much more attractive for this kind of task.

     
  • muzzol

    muzzol - 2010-01-08

    that ugly hack you're describing seems very similar to my script.

    i don't have it here right now, but is as simple as store password and username in a file and then a second script to parse it and create the smbnetfs.auth file.

    gnome-keyring solution sounds great also because is already integrated with default ubuntu desktop configuration.

     
  • muzzol

    muzzol - 2010-01-08

    you could also take a look at

    http://pam-mount.sourceforge.net/doc.php

    this module is also for mounting filesystems with fuse and other mechanisms

     

Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

JavaScript is required for this form.





No, thanks