Home

Adding LDAP users automatically to the fuse group in LTSP

Wed, 2009.01.28 - 13:26 — müzso
The right search query for this topic is something like "ltsp fuse user group". Actually I came from a pretty different direction to the solution (using pam_group in /etc/pam.d/common-auth), but once I got to pam_group, the page with the exact instructions was revealed right away. Smile

Just so it won't disappear from my sight, here's the solution (coming from Frank Bergmann):
Add
*;*;*;Al0000-2400;plugdev,fuse,scanner,video,audio
to the end of the /etc/security/group.conf file.

Then, add
auth       optional     pam_group.so
to /etc/pam.d/sshd just before the @include common-auth line.

You don't have to restart, just re-login and pam should put you in the groups above.
id <username> proves this.

Actually I think that adding users to fuse is enough. Or do you need to have eg. "scanner" group on the _server_ to get access to the client's attached scanner? Shock