I have a setup very similar to Dan Bishop's Ubuntu 12.04 Ultimate Server Guide.
I actually created a series of ansible scripts to automate this process on my github.
So I have ldap+kerberos set up on a machine that client boxes are connecting to. I have a nas that is running an nfs server that serves up the /home directory to users in the domain. You can see my complete configuration on github minus my environment specific variables like passwords, etc.
Everything seems to be working except one problem. If I log into a machine as a domainadmin user I can use sudo to run commands like updating apt cache, but I cannot modify data in /home.
See the below, note that both users, ansible and jgrowl, are domainadmins:
ansible@ip-192-168-0-13:~$ pwd
/home/ansible
ansible@ip-192-168-0-13:~$ ls -l /home
total 12
drwxr-xr-x 8 ansible ansible 4096 Aug 12 14:07 ansible
drwxr-xr-x 7 jgrowl jgrowl 4096 Aug 12 14:08 jgrowl
ansible@ip-192-168-0-13:~$ mkdir test1
ansible@ip-192-168-0-13:~$ ls -l
total 4
drwxrwxr-x 2 ansible ansible 4096 Aug 12 14:06 test1
ansible@ip-192-168-0-13:~$ sudo mkdir test2
mkdir: cannot create directory `test2': Permission denied
ansible@ip-192-168-0-13:~$ sudo -u ansible mkdir test3
ansible@ip-192-168-0-13:~$ ls -l
total 8
drwxrwxr-x 2 ansible ansible 4096 Aug 12 14:06 test1
drwxr-xr-x 2 ansible ansible 4096 Aug 12 14:07 test3
ansible@ip-192-168-0-13:~$ sudo mkdir ~jgrowl/test4
mkdir: cannot create directory `/home/jgrowl/test4': Permission denied
ansible@ip-192-168-0-13:~$ sudo -u jgrowl mkdir ~jgrowl/test5
ansible@ip-192-168-0-13:~$ ls -l /home/jgrowl
total 16
drwxr-xr-x 2 jgrowl jgrowl 4096 Aug 12 14:08 test5
So sudo can only be used when specifying the user that directory belongs to. Does this make sense?
Here are a couple of files that are important:
Contents of /etc/exports on the nfs server
/export *(rw,fsid=0,crossmnt,insecure,async,no_subtree_check,sec=krb5p:krb5i:krb5)
/export/home *(rw,insecure,async,no_subtree_check,sec=krb5p:krb5i:krb5)
I know there is a lot going on here and is probably difficult to help me, but any suggestions would be appreciated!