Due to people not documenting squat here over years, one of our servers configurations got jacked up when I migrated it from OpenLDAP to IPA. This is a CentOS 6 server that runs RANCID to pull customer edge router configs. The old OpenLDAP setup had a policy in Kerberos that would create a symlink to the RANCID backup directory in the home directory of a new user account upon first login. Is it possible to set this up in IPA? If so, are there docs/how tos on doing this? I would assume it's an IPA policy, but I'm not sure how similar it would be to doing it in OpenLDAP/Kerberos.

Rob Crittenden writes: > Mark Haney via FreeIPA-users wrote: > > > Due to people not documenting squat here over years, one of our > > servers configurations got jacked up when I migrated it from > > OpenLDAP > > to IPA.  This is a CentOS 6 server that runs RANCID to pull > > customer > > edge router configs.  The old OpenLDAP setup had a policy in > > Kerberos > > that would create a symlink to the RANCID backup directory in the > > home directory of a new user account upon first login.  Is it > > possible to set this up in IPA?  If so, are there docs/how tos on > > doing this? > > > > I would assume it's an IPA policy, but I'm not sure how similar > > it > > would be to doing it in OpenLDAP/Kerberos. > > > > Unfortunately there is no way to specify scripts upon user login > (first or otherwise) in IPA currently. Could you perhaps do something weird with the default shell setting?

On 10/10/2017 05:46 PM, Simo Sorce wrote: > > > > > Could you perhaps do something weird with the default shell > > setting? > > probably can use oddjob/oddjob_mkhomedir properly configured on the > various servers. > > Simo. > Actually it was even simpler than that, and goes to show what happens  when you over-think things.  As this was on a server that needed all  home directories to have this symlink, I just added it to the skeleton  directory.  I really feel like an idiot for not thinking about that.  I  haven't had to mess with /etc/skel in so long, it never crossed my mind  until I read the oddjobd_mkhomedir man page.  I hate getting old.