Allow regular user to use mount without SUDO or FSTAB
Our desktop workstations are linux.
Each user uses Active Directory to authenticate. Mount does not automatically use the users PAM credentials to authenticate against a remote mount point - you must use either a credentials file or type in your username/domain/password on the command line.
Each user has encrypted home directories and they mount their remote mount points to a directory structure under their home directory.
Each user has different access rights on the domain and they want to keep their credentials file in their local plasma-vault.
Unfortunately, even when the plasma-vault is open, the moment they use sudo to run mount, the sudo process runs as root, who can not see the contents of the vault.
So, I need to have the users be able to run mount, under their own home directory, without the need for /etc/fstab via sudo.
How do I do this?
linux mount sudo cifs
edited Jul 20 '18 at 19:46
slm♦
255k71539687
asked Jul 20 '18 at 18:06
Dalton CalfordDalton Calford
111
bumped to the homepage by Community♦ 4 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
Our desktop workstations are linux.
Each user uses Active Directory to authenticate. Mount does not automatically use the users PAM credentials to authenticate against a remote mount point - you must use either a credentials file or type in your username/domain/password on the command line.
Each user has encrypted home directories and they mount their remote mount points to a directory structure under their home directory.
Each user has different access rights on the domain and they want to keep their credentials file in their local plasma-vault.
Unfortunately, even when the plasma-vault is open, the moment they use sudo to run mount, the sudo process runs as root, who can not see the contents of the vault.
So, I need to have the users be able to run mount, under their own home directory, without the need for /etc/fstab via sudo.
How do I do this?
linux mount sudo cifs
edited Jul 20 '18 at 19:46
slm♦
255k71539687
asked Jul 20 '18 at 18:06
Dalton CalfordDalton Calford
111
bumped to the homepage by Community♦ 4 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
have you investigatedfuseit creates sshfs mounts without using root, perhap it can also do CIFS mounts?
– Jasen
Jul 21 '18 at 5:52
add a comment |
Our desktop workstations are linux.
Each user uses Active Directory to authenticate. Mount does not automatically use the users PAM credentials to authenticate against a remote mount point - you must use either a credentials file or type in your username/domain/password on the command line.
Each user has encrypted home directories and they mount their remote mount points to a directory structure under their home directory.
Each user has different access rights on the domain and they want to keep their credentials file in their local plasma-vault.
Unfortunately, even when the plasma-vault is open, the moment they use sudo to run mount, the sudo process runs as root, who can not see the contents of the vault.
So, I need to have the users be able to run mount, under their own home directory, without the need for /etc/fstab via sudo.
How do I do this?
linux mount sudo cifs
edited Jul 20 '18 at 19:46
slm♦
255k71539687
asked Jul 20 '18 at 18:06
Dalton CalfordDalton Calford
111
Our desktop workstations are linux.
Each user uses Active Directory to authenticate. Mount does not automatically use the users PAM credentials to authenticate against a remote mount point - you must use either a credentials file or type in your username/domain/password on the command line.
Each user has encrypted home directories and they mount their remote mount points to a directory structure under their home directory.
Each user has different access rights on the domain and they want to keep their credentials file in their local plasma-vault.
Unfortunately, even when the plasma-vault is open, the moment they use sudo to run mount, the sudo process runs as root, who can not see the contents of the vault.
So, I need to have the users be able to run mount, under their own home directory, without the need for /etc/fstab via sudo.
How do I do this?
linux mount sudo cifs
linux mount sudo cifs
edited Jul 20 '18 at 19:46
slm♦
255k71539687
asked Jul 20 '18 at 18:06
Dalton CalfordDalton Calford
111
edited Jul 20 '18 at 19:46
slm♦
255k71539687
asked Jul 20 '18 at 18:06
Dalton CalfordDalton Calford
111
edited Jul 20 '18 at 19:46
slm♦
255k71539687
edited Jul 20 '18 at 19:46
slm♦
255k71539687
edited Jul 20 '18 at 19:46
slm♦
255k71539687
255k71539687
asked Jul 20 '18 at 18:06
Dalton CalfordDalton Calford
111
asked Jul 20 '18 at 18:06
Dalton CalfordDalton Calford
111
asked Jul 20 '18 at 18:06
Dalton CalfordDalton Calford
111
111
bumped to the homepage by Community♦ 4 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ 4 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
have you investigatedfuseit creates sshfs mounts without using root, perhap it can also do CIFS mounts?
– Jasen
Jul 21 '18 at 5:52
add a comment |
have you investigatedfuseit creates sshfs mounts without using root, perhap it can also do CIFS mounts?
– Jasen
Jul 21 '18 at 5:52
have you investigated
fuse it creates sshfs mounts without using root, perhap it can also do CIFS mounts?– Jasen
Jul 21 '18 at 5:52
have you investigated
fuse it creates sshfs mounts without using root, perhap it can also do CIFS mounts?– Jasen
Jul 21 '18 at 5:52
add a comment |
1 Answer
1
active
oldest
votes
sudo is not only used for elevating a user to full root access.
Edit the /etc/sudoers file to allow your uses to use mount and umount. Use the sudo visudo to ensure the file permissions are kept the same.
The edit would include a line such as this:
username ALL=(ALL) NOPASSWD: /usr/bin/mount, /usr/bin/umount
For more options, see the sudoers manual.
answered Jul 20 '18 at 20:51
Michael McMahonMichael McMahon
143
add a comment |
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f457504%2fallow-regular-user-to-use-mount-without-sudo-or-fstab%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
sudo is not only used for elevating a user to full root access.
Edit the /etc/sudoers file to allow your uses to use mount and umount. Use the sudo visudo to ensure the file permissions are kept the same.
The edit would include a line such as this:
username ALL=(ALL) NOPASSWD: /usr/bin/mount, /usr/bin/umount
For more options, see the sudoers manual.
answered Jul 20 '18 at 20:51
Michael McMahonMichael McMahon
143
add a comment |
sudo is not only used for elevating a user to full root access.
Edit the /etc/sudoers file to allow your uses to use mount and umount. Use the sudo visudo to ensure the file permissions are kept the same.
The edit would include a line such as this:
username ALL=(ALL) NOPASSWD: /usr/bin/mount, /usr/bin/umount
For more options, see the sudoers manual.
answered Jul 20 '18 at 20:51
Michael McMahonMichael McMahon
143
add a comment |
sudo is not only used for elevating a user to full root access.
Edit the /etc/sudoers file to allow your uses to use mount and umount. Use the sudo visudo to ensure the file permissions are kept the same.
The edit would include a line such as this:
username ALL=(ALL) NOPASSWD: /usr/bin/mount, /usr/bin/umount
For more options, see the sudoers manual.
answered Jul 20 '18 at 20:51
Michael McMahonMichael McMahon
143
sudo is not only used for elevating a user to full root access.
Edit the /etc/sudoers file to allow your uses to use mount and umount. Use the sudo visudo to ensure the file permissions are kept the same.
The edit would include a line such as this:
username ALL=(ALL) NOPASSWD: /usr/bin/mount, /usr/bin/umount
For more options, see the sudoers manual.
answered Jul 20 '18 at 20:51
Michael McMahonMichael McMahon
143
answered Jul 20 '18 at 20:51
Michael McMahonMichael McMahon
143
answered Jul 20 '18 at 20:51
Michael McMahonMichael McMahon
143
answered Jul 20 '18 at 20:51
Michael McMahonMichael McMahon
143
143
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f457504%2fallow-regular-user-to-use-mount-without-sudo-or-fstab%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
have you investigated
fuseit creates sshfs mounts without using root, perhap it can also do CIFS mounts?– Jasen
Jul 21 '18 at 5:52