I created and configured a test-environment of 3 virtual machines:
- A FreeIPA server which provides krb5-authentication
- A NFS-Server using server 1 to secure itself
- A client that automounts home directories from the nfs server
The problem is, that when i add a user to my kerberos domain (using the FreeIPA webinterface in this case) i still have to connect to the fileserver to create a home directory for the user. Admittedly this is a simple process but it adds complexity to the process of user creation and makes it impossible for me to delegate the task to non-technical people because i'd have to grant them access to the fileserver.
My first idea was to create a cronjob that fetches the user list and creates missing homes. Problem is that this leaves a timeframe after creation where the account is not working which is bound to cause trouble.
TL;DR: What is the best practice to automatically create user specific directories (homes) on a standalone NFS-Server?