1 PACKAGES += cifs-utils libpam-mount libpam-script lxdm nis nscd samba-common-bin usermode
4 nis_server := nismaster
9 nis nis/domain string .${nis_server}
12 export smb_nis_pamscript smb_nis_pammount
14 define smb_nis_pamscript :=
17 # forced through bash, to hide euid from smbpasswd
19 printf "%s\n" "$$PAM_OLDAUTHTOK" "$$PAM_AUTHTOK" "$$PAM_AUTHTOK" \
20 | smbpasswd -sr ${nis_server} -U "$$PAM_USER"
27 define smb_nis_pammount :=
28 <pam_mount> <debug enable="0" />
29 <!-- Volume definitions -->
30 <volume options="user=%(USER)" fstype="cifs" server="${nis_server}" path="%(USER)" mountpoint="~" />
31 <mntoptions require="nosuid,nodev" />
32 <logout wait="0" hup="no" term="no" kill="no" />
33 <mkmountpoint enable="1" remove="true" />
41 _smb_nis: ${CFGROOT}/opt/pam_script/pam_script_passwd ${CFGROOT}/etc/security/pam_mount.conf.xml
42 _smb_nis: ${CFGROOT}/etc/yp.conf ${CFGROOT}/etc/defaultdomain
45 sed -Ei 's;^(passwd:|group:|shadow:|gshadow:) *;\1 nis ;' $${CFGROOT}/etc/nsswitch.conf
46 sed -Ei '/pam_(script|mount).so/d' $${CFGROOT}/etc/pam.d/common-*
47 printf '\nauth optional pam_mount.so\n' >>$${CFGROOT}/etc/pam.d/common-auth
48 printf '\nsession optional pam_mount.so\n' >>$${CFGROOT}/etc/pam.d/common-session
49 printf '\npassword required pam_script.so dir=/opt/pam_script\n' >$${CFGROOT}/etc/pam.d/common-password
51 ${CFGROOT}/opt/pam_script/pam_script_passwd: ${CFGROOT} .FORCE
53 printf '%s' "$${smb_nis_pamscript}" >"$@"
55 ${CFGROOT}/etc/security/pam_mount.conf.xml: ${CFGROOT} .FORCE
57 printf '%s' "$${smb_nis_pammount}" >"$@"
59 ${CFGROOT}/etc/yp.conf: ${CFGROOT} .FORCE
60 printf 'ypserver %s\n' "${nis_server}" >"$@"
62 ${CFGROOT}/etc/defaultdomain: ${CFGROOT} .FORCE
63 printf '.%s\n' "${nis_server}" >"$@"