How to create home dirs as separate ZFS datasets

[Harry Weppner]

Hi there,

my goal is to authenticate users via ldap and create a separate ZFS dataset per user. Someone had asked this general question on serverfault and one approach outlined there was to use pam_exec.so in combination with a shell script to create a ZFS dataset on-demand.

Sounds feasible and I was wondering if anyone has already accomplished this on a FreeNAS system? What is the best option to extend /etc/pam.d/sshd ? Are there perhaps even simpler options that I've overlooked?

Thanks & cheerio, Harry.

 

[Harry Weppner]

A shell script now creates a zfs dataset on-demand – it is invoked by pam_exec.so, which I manually added to /etc/pam.d/sshd. Is there a clean way to extend /etc/pam.d/sshd so the change remains in place!?

Thanks & cheerio, Harry.

 

[cyberjock]

What do you plan to do with the dataset once its created? Share it?

 

[Harry Weppner]

What do you plan to do with the dataset once its created? Share it?

Yes, nfs shares.