36.6. Modifying an IdM ID view

Procedure

1. On the IdM client, create the directory that you want idm_user to use on client1.idm.example.com as the user home directory:

   # mkdir /home/user_1234/

2. On the IdM client, change the ownership of the directory:

   # chown idm_user:idm_user /home/user_1234/

3. On the IdM server, display the ID view, including the hosts to which the ID view is currently applied. To display the ID view named example_for_client1:

   $ ipa idview-show example_for_client1 --all
     dn: cn=example_for_client1,cn=views,cn=accounts,dc=idm,dc=example,dc=com
     ID View Name: example_for_client1
     User object override: idm_user
     Hosts the view applies to: client1.idm.example.com
     objectclass: ipaIDView, top, nsContainer

   The output shows that the ID view currently applies to client1.idm.example.com.

4. On the IdM server, modify the user override of the example_for_client1 ID view. To override the user home directory:

   • Enter the ipa idoverrideuser-add command
   • Add the name of the ID view
   • Add the user name, also called the anchor

   • Add the --homedir option:

     $ ipa idoverrideuser-mod example_for_client1 idm_user --homedir=/home/user_1234
     -----------------------------
     Modified a User ID override "idm_user"
     -----------------------------
       Anchor to override: idm_user
       User login: user_1234
       Home directory: /home/user_1234/

   For a list of the available options, run ipa idoverrideuser-mod --help.

5. To apply the new configuration to the client1.idm.example.com system immediately:

   1. SSH to the IdM client system as root:

      $ ssh root@client1
      Password:

   2. On the IdM client, clear the SSSD cache:

      # sss_cache -E

   3. On the IdM client, restart the SSSD daemon:

   # systemctl restart sssd

Verification

1. SSH to the client system as idm_user:

   # ssh idm_user@client1.idm.example.com
   Password:
   
   Last login: Sun Jun 21 22:34:25 2020 from 192.168.122.229
   [user_1234@client1 ~]$

2. On the client system, print the working directory:

   $ pwd
   /home/user_1234/