+44(0) 7773 764 708

www.nvizible.com

Hi Todd,

Hi again Todd,

On 2010-03-08, at 10:44 AM, Hugh Macdonald wrote:

The gist of it is that my user's home directories are shared using NFS (OSX Server -> OSX Workstations), and it's causing permissions problems when switching to any user other than the one that's logged on through the GUI.

Can I ask to what purpose other users are trying to ssh in to a machine? Is it for your render farm or something else?

:)

Mat X

E: matxdotca@gmail.com T: 778-837-1036

? Apple Certified Xsan 2 Admininistrator ? Apple Certified Media Administrator ? Apple Certified Pro - Final Cut Server Level One ? Apple Certified Technical Coordinator (10.6) ? Apple Certified Support Professional (10.6)

Todd - Thanks for your help - I'll keep working at this one then...

Have you checked the ownership and permissions on /Volumes and /Volumes/data? I note from your ls output on superuser.com that /mount/company_users is owned by 'hugh:wheel' rather than something more generic.

You might also want to confirm that the link between /mount/company_users and /Volumes/data/company_users really is a symlink and not a mac alias.

Tim

On 9/03/10 11:46 PM, Hugh Macdonald wrote: > Todd - Thanks for your help - I'll keep working at this one then... > > J.J. - Dir Util allows me to specify the mount point - I'll have a look > at doing it using fstab instead... Personally, I still think that the > NFS side of this is working just fine - it's OSX trying to do something > else on top of this that's causing the problems here. And I'm still on > 10.5.x (server and workstations) here. > > Mat - The users themselves shouldn't be doing this - it's more tied up > in the pipeline and render farm side of things. > > There are two things that I need to be able to do that I can't at the > moment... > > The 'render' user (that all render machines are running as) needs to be > able to sudo (without a password) the command 'runFarmCommand.py' as any > user. This works for now, but usually chucks up warnings about not being > able to find the user's home directory. > > Users need to be able to SSH between machines without needing a password > (for Alfred). At the moment, the user on the remote machine can't access > ~/.ssh/, so the authentication can't happen (this works just fine under > Linux) > > > Any more thoughts most welcome... I was hoping that some of you might > have come across the same issues if you're working with a combined > Linux/OSX setup (although if your server side is Linux, which is > probably most likely, you may not have these problems) > > > Thanks again! > > Hugh Macdonald > nvizible – VISUAL EFFECTS > > +44(0) 207 659 2369 > +44(0) 7773 764 708 > > www.nvizible.com http://www.nvizible.com > > > > On 8 March 2010 21:21, matxdotca matxdotca@gmail.com matxdotca@gmail.com> wrote: > > > On 2010-03-08, at 10:44 AM, Hugh Macdonald wrote: > > > The gist of it is that my user's home directories are shared using > NFS (OSX Server -> OSX Workstations), and it's causing permissions > problems when switching to any user other than the one that's logged > on through the GUI. > > Can I ask to what purpose other users are trying to ssh in to a > machine? Is it for your render farm or something else? > > > :) > > Mat X > > > E: matxdotca@gmail.com matxdotca@gmail.com > T: 778-837-1036 > > ? Apple Certified Xsan 2 Admininistrator > ? Apple Certified Media Administrator > ? Apple Certified Pro - Final Cut Server Level One > ? Apple Certified Technical Coordinator (10.6) > ? Apple Certified Support Professional (10.6) > > _ > StudioSysAdmins-Discuss mailing list > StudioSysAdmins-Discuss@mailman.studiosysadmins.com > StudioSysAdmins-Discuss@mailman.studiosysadmins.com > http://mailman.studiosysadmins.com/mailman/listinfo/studiosysadmins-discuss > > > > > _ > StudioSysAdmins-Discuss mailing list > StudioSysAdmins-Discuss@mailman.studiosysadmins.com > http://mailman.studiosysadmins.com/mailman/listinfo/studiosysadmins-discuss

-- Tim Nicholas - tjn@wetafx.co.nz +64 21 337 204 (Cell), +64 4 380 3682 (Work), ext5682 Systems Administrator, Weta Digital, NZ

On 2010-03-09, at 2:46 AM, Hugh Macdonald wrote:

Mat - The users themselves shouldn't be doing this - it's more tied up in the pipeline and render farm side of things.

Depending on your render pipeline you could have the rendering run as the local (Mac) admin user, thereby not needing a mounted nfs home folder on each workstation that is rendering. Since you're probably rendering on your shared network filesystem (nfs) you don't need home folders of any particular users.

There are two things that I need to be able to do that I can't at the moment...

The 'render' user (that all render machines are running as) needs to be able to sudo (without a password) the command 'runFarmCommand.py' as any user. This works for now, but usually chucks up warnings about not being able to find the user's home directory.

the render user in this case could be the local admin account or another local account just for rendering. And this would eliminate these error messages.

Users need to be able to SSH between machines without needing a password (for Alfred). At the moment, the user on the remote machine can't access ~/.ssh/, so the authentication can't happen (this works just fine under Linux)

If you can trust rendering users to use a shared account then your auth key for ssh can go locally. Depends on your security requirements, vs. your pipeline setup needs.

:)

Mat X