Skip to content
Snippets Groups Projects

Network Share Mounter: Unable to remove user added shares

    • Open Issue created by sg*****@s*****.d** via GitLab Support Bot @support-bot

    Hi FAUmac Team,

    I hope you’re all doing well and thank you for at great product, thank you for open sourcing it – it’s much appreciated!

    I’ve come across an issue, but as an ‘outsider’ I’ve been unable to report it through the GitLab issue tracker, hence this mail :blush:

    If I add a share to my configuration through the NSM gui, I’m unable to remove it again. I’m unable to click and mark the share to then click the remove button to remove it (edit share also does not actually edit, but instead creates a new entry, but this is not shown afterwards). To remove a share, I’ll have to go through deleting it from the NSM plist-file in my home directory.

    On the same hand, I cannot seem to toggle the Kerberos option for such shares. This seems to be per design, but seems counter intuitive, as individually mounted shares not distributed from the MDM then require username and password to authenticate, even if the share accepts Kerberos authentication with all the added single sign-on and security benefits it offers.

    Venlig hilsen Søren Grønning Iversen Klientspecialist, Mac- og Linux Fællesadministration SDU IT IT-help Team Device T 65 50 46 50tel:+4565504650 M 93 50 72 35tel:+4593507235 sgiv@sdu.dkmailto:sgiv@sdu.dk Syddansk Universitet Campusvej 55 5230 Odense M www.sdu.dkhttps://www.sdu.dk [https://cdn.sdu.dk/img/sdulogos/SDU_BLACK_signatur.png]

    To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information

    Child items ...

    • Activity

    • Gregor Longariva
      Gregor Longariva @unrz142 ·
      Owner

      Hi Søren,

      Thank you very much for your inquiry. I'm sorry that your email has been sitting for a while, but it hasn't been forgotten :wink: Regarding your first point: yes, I can understand what you mean: the share cannot be removed, that is a bug we will fix. Thank you for the hint.

      As for the second point, I'm not quite sure if I understand it.
      I'll try to present it as I understood it:

      • I want to add another manual share and click on the "+"
      • then I enter the share address in the corresponding field and click on the toggle switch to select Kerberos authentication (instead of username/password)
      • Then I click on Add Share and the share is mounted via Kerberos. It works as intended: the share is mounted with Kerberos authentication without asking for a password. However, a Kerberos realm must be defined via MDM for this to work. Is it not functioning for you, or is the implementation not intuitive? Perhaps you wish to specify a Kerberos realm independently at this point as an end user?

      In any case, thank you very much for your feedback; we want the app to be used as much as possible and are pleased that it is well received.

      Best regards.

      Gregor

      FAUmac Team @ RRZE Friedrich-Alexander-Universität Erlangen-Nürnberg Regionales Rechenzentrum Erlangen Martensstraße 1, 91058 Erlangen, Germany Tel. +49 9131 85-28168 Mobil +49 179 9404244 Fax +49 9131 302941 gregor.longariva@fau.de #gernperDu

    • S
      sg*****@s*****.d** (external participant) ·
      Author

      Hi Gregor,

      Thank you so much for getting back to me. I really appreciate it!

      Concerning my second point:

      On the same hand, I cannot seem to toggle the Kerberos option for such shares. This seems to be per design, but seems counter intuitive, as individually mounted shares not distributed from the MDM then require username and password to authenticate, even if the share accepts Kerberos authentication with all the added single sign-on and security benefits it offers.

      What I mean is that I cannot manually add a share and use Kerberos authentication by toggling the Kerberos switch. The toggle switch is locked, somehow. This means that only MDM-configured shares can use Kerberos, instead requiring username and password authentication.

      This seems counter intuitive, as it would be perfectly reasonable to assume that a user might need to use Kerberos to connect to a share not configured by an MDM. E.g., I often do this myself to access specific subfolders directly on a given root share instead of first having to traverse the folder structure to get there. Moreover, I as the MDM administrator, might not know of all relevant shares that a given user might need to access, so it would be nice to allow users the freedom of manually adding shares using either Kerberos or username/password authentication :blush:

      I hope this clarification helps :blush:

      Best regards, Søren Grønning Iversen Client specialist, Mac and Linux Central Administration SDU IT IT-help Team Device T +45 65 50 46 50tel:+4565504650 M +45 93 50 72 35tel:+4593507235 sgiv@sdu.dkmailto:sgiv@sdu.dk University of Southern Denmark Campusvej 55 DK-5230 Odense M www.sdu.dkhttps://www.sdu.dk/ [https://cdn.sdu.dk/img/sdulogos/SDU_BLACK_signatur.png]

      ...

      From: "Gregor Longariva (@unrz142)" rrze-gitlab@fau.de Reply to: RRZE FAUmac / Network Share Mounter rrze-gitlab+5b8c709ddff523ac76b05055a90601ee@fau.de Date: Tuesday, 19 November 2024 at 13.39 To: Søren Grønning Iversen sgiv@sdu.dk Subject: Re: Network Share Mounter: Unable to remove user added shares (#129)

      Du får ikke ofte mails fra rrze-gitlab@fau.de. Få mere at vide om, hvorfor dette er vigtigthttps://aka.ms/LearnAboutSenderIdentification

      Hi Søren,

      Thank you very much for your inquiry. I'm sorry that your email has been sitting for a while, but it hasn't been forgotten :wink: Regarding your first point: yes, I can understand what you mean: the share cannot be removed, that is a bug we will fix. Thank you for the hint.

      As for the second point, I'm not quite sure if I understand it. I'll try to present it as I understood it: · I want to add another manual share and click on the "+" · then I enter the share address in the corresponding field and click on the toggle switch to select Kerberos authentication (instead of username/password) · Then I click on Add Share and the share is mounted via Kerberos. It works as intended: the share is mounted with Kerberos authentication without asking for a password. However, a Kerberos realm must be defined via MDM for this to work. Is it not functioning for you, or is the implementation not intuitive? Perhaps you wish to specify a Kerberos realm independently at this point as an end user?

      In any case, thank you very much for your feedback; we want the app to be used as much as possible and are pleased that it is well received.

      Best regards.

      Gregor

      FAUmac Team @ RRZE Friedrich-Alexander-Universität Erlangen-Nürnberg Regionales Rechenzentrum Erlangen Martensstraße 1, 91058 Erlangen, Germany Tel. +49 9131 85-28168 Mobil +49 179 9404244 Fax +49 9131 302941 gregor.longariva@fau.demailto:gregor.longariva@fau.de #gernperDu

      — Unsubscribehttps://gitlab.rrze.fau.de/-/sent_notifications/REDACTED/unsubscribe

    • Dominik Schuppenhauer made the issue visible to everyone

      made the issue visible to everyone

    • Gregor Longariva created branch 129-network-share-mounter-unable-to-remove-user-added-shares to address this issue

      created branch 129-network-share-mounter-unable-to-remove-user-added-shares to address this issue

    • Gregor Longariva mentioned in commit 19ca3628

      mentioned in commit 19ca3628

    • Gregor Longariva reopened

      reopened

    • Gregor Longariva
      Gregor Longariva @unrz142 ·
      Owner

      Hi Søren,

      I've fixed the issue with deleting shares. For your second point, I will need a bit more time, but I am staying on it.

      Best regards

      Gregor

    • S
      sg*****@s*****.d** (external participant) ·
      Author

      Hi Gregor

      Thank you so much for keeping me informed, I greatly appreciate it! :blush:

      Venlig hilsen Søren Grønning Iversen Klientspecialist, Mac- og Linux Fællesadministration SDU IT IT-help Team Device T 65 50 46 50tel:+4565504650 M 93 50 72 35tel:+4593507235 sgiv@sdu.dkmailto:sgiv@sdu.dk Syddansk Universitet Campusvej 55 5230 Odense M www.sdu.dkhttps://www.sdu.dk/ [https://cdn.sdu.dk/img/sdulogos/SDU_BLACK_signatur.png]

      ...

      From: "Gregor Longariva (@unrz142)" rrze-gitlab@fau.de Reply to: RRZE FAUmac / Network Share Mounter rrze-gitlab+65d634d48291173e276979913a873b34@fau.de Date: Tuesday, 3 December 2024 at 20.47 To: Søren Grønning Iversen sgiv@sdu.dk Subject: Re: Network Share Mounter: Unable to remove user added shares (#129)

      Du får ikke ofte mails fra rrze-gitlab@fau.de. Få mere at vide om, hvorfor dette er vigtigthttps://aka.ms/LearnAboutSenderIdentification

      Hi Søren,

      I've fixed the issue with deleting shares. For your second point, I will need a bit more time, but I am staying on it.

      Best regards

      Gregor

      — Unsubscribehttps://gitlab.rrze.fau.de/-/sent_notifications/REDACTED/unsubscribe

    • Gregor Longariva changed milestone to %Network Share Mounter Version 4.0.0

      changed milestone to %Network Share Mounter Version 4.0.0

    • Gregor Longariva added label::confirmed label::enhancement labels

      added label::confirmed label::enhancement labels

    Please register or sign in to reply