Bug 16070 - mkhomedir on kerberos auth NFS needs to be done as non-root
Summary: mkhomedir on kerberos auth NFS needs to be done as non-root
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: Other (show other bugs)
Version: 4.24.0
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba QA Contact
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-05-08 10:27 UTC by Björn Jacke
Modified: 2026-05-08 10:27 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Björn Jacke 2026-05-08 10:27:08 UTC 
if the home directory is on an NFS storage with KRB5 auth, then root is usually not allowed to act there but the authorized user might be able to do that.

https://git.samba.org/?p=metze/samba/wip.git;a=commitdiff;h=2b5d917e1a1d17b269bb053354ee47980c02a4a5

Contains a patch for that, which introduces a mkhomedir_as_user setting. This needs testing, if you have such a setup, feel free to test this and give feedback here.