LDAP authentication all users /home dir on one server

Having searched and grepped and regex'd 'till I'm going blue, I've yet to locate an answer to the following question.

We want an LDAP authentication system for users to log in against and for their /home directory to be dished up from one server. Surely this notion is not new. It is similar to MS's travelling desktop is it not. Where, no matter which PC the user logs into, their personal home directories are made available to them on that PC.

What I'm thinking of so far is we do the LDAP and during setup tell the system the home dir is mounted from one or other server.

Have you seen any HOWTO's on this topic?

Peter

Peter Lowrie wrote:

> We want an LDAP authentication system for users to log in against and for
> their /home directory to be dished up from one server. Surely this notion
> is not new. It is similar to MS's travelling desktop is it not. Where, no
> matter which PC the user logs into, their personal home directories are
> made available to them on that PC.
>
> What I'm thinking of so far is we do the LDAP and during setup tell the
> system the home dir is mounted from one or other server.

In addition to Keith's reply:
We use LDAP for our ~1000 users and ~20 user groups (objects posixAccount,
shadowAccount and our extentions). Every user on client PCs has to log on
through LDAP, so there are no problems with UIDs (they are unique when
setting up users in the LDAP database).
So what you need is the right setting in /etc/ldap.conf for the LDAP server
and in /etc/nsswitch.conf (on every client) to enable LDAP lookups.

We share home directories through NFS using automount on the clients. So in
our case a user's home directory looks like /misc/<server>/home/<user>
(alternatively one could use /net instead of /misc). We also use
automount-maps from LDAP (also set up in nsswitch.conf). Additionally, our
DHCP and nameserver config files are generated from the LDAP data.

It's a pretty straight-forward setup, just make sure that LDAP
authentication works fine (note that there are different password hashes
you can use, we still use {crypt}). Depending on the size of your network,
you might want to use multiple LDAP servers and set up replication.

Toni