36.7. Adding an ID view to override an IdM user home directory on an IdM client

Procedure

1. On the IdM client, create the directory that you want idm_user to use as the user home directory:

   # mkdir /home/user_1234/

2. On the IdM client, change the ownership of the directory:

   # chown idm_user:idm_user /home/user_1234/

3. On the IdM server, create an ID view. For example, to create an ID view named example_for_client1:

   $ ipa idview-add example_for_client1
   ---------------------------
   Added ID View "example_for_client1"
   ---------------------------
     ID View Name: example_for_client1

4. On the IdM server, add a user override to the example_for_client1 ID view. To override the user home directory:

   • Enter the ipa idoverrideuser-add command
   • Add the name of the ID view
   • Add the user name, also called the anchor
   • Add the --homedir option:

   $ ipa idoverrideuser-add example_for_client1 idm_user --homedir=/home/user_1234
   -----------------------------
   Added User ID override "idm_user"
   -----------------------------
     Anchor to override: idm_user
     Home directory: /home/user_1234/

5. On the IdM server, apply example_for_client1 to the client1.idm.example.com host:

   $ ipa idview-apply example_for_client1 --hosts=client1.idm.example.com
   -----------------------------
   Applied ID View "example_for_client1"
   -----------------------------
   hosts: client1.idm.example.com
   ---------------------------------------------
   Number of hosts the ID View was applied to: 1
   ---------------------------------------------

   注意

   The ipa idview-apply command also accepts the --hostgroups option. The option applies the ID view to hosts that belong to the specified host group, but does not associate the ID view with the host group itself. Instead, the --hostgroups option expands the members of the specified host group and applies the --hosts option individually to every one of them.

   This means that if a host is added to the host group in the future, the ID view does not apply to the new host.

6. To apply the new configuration to the IdM client system immediately:

   1. SSH to the IdM client system as root:

      $ ssh root@client1
      Password:

   2. On the IdM client, clear the SSSD cache:

      # sss_cache -E

   3. On the IdM client, restart the SSSD daemon:

   # systemctl restart sssd

Verification

1. SSH to the IdM client system as idm_user:

   # ssh idm_user@client1.idm.example.com
   Password:
   Activate the web console with: systemctl enable --now cockpit.socket
   
   Last login: Sun Jun 21 22:34:25 2020 from 192.168.122.229
   [idm_user@client1 /]$

2. Print the working directory:

   $ pwd
   /home/user_1234/