@pandita ... it's been almost five years, perhaps it's time to accept and give jmunsch 15 reps (that still cannot be cashed in on a latte :-/)?

Related? github.com/systemd/systemd/issues/24984

Not sure if it has always been the case, but for me I need no spaces between the colon and remote directory; with a space, for me it fails, but it works without the space, as in sshfs :/mnt/volume -o ssh_command=.... Thanks Alex, this was just what I needed today!

Or perhaps more directly: superuser.com/a/1104513/402193

I should have accepted this a long time ago. I'm still not happy with the answer, but that's because of several of the nuances with Samba4 and ancillary authentication of other libraries/apps. I apologize for waiting so long to give you the credit, Isidoro.

BTW: stale link, since OpenSCG was purchased by Amazon and that page is now not right. Unless/until it is properly re-published, the web archive has it available from 2017 Nov 24.

Thanks Isidoro, I'll look into this a bit more. I'm not thrilled about decreasing "strong auth" in samba, so I need to read into the implications of that.

This solution is much better performing, since it calls mv once for all arguments (or for all of -L or -n, if supplied). Otherwise, calling mv for each file will get old (and slow) fast.

Though owncloud does support LDAP (strongly urge you to not stay with v8.1), portainer does not (yet) support LDAP, and ethercalc says that user/pass management is the role of a CMS. This suggests that some of your apps will need to be behind an apache or nginx password-wall; but if you put owncloud behind it, things will almost certainly break.

If you're talking about a centralized authentication scheme by which users can log in to a specific service with a username/password that may be shared across all services ... there is no single answer. Though you can provide LDAP/AD or SAML, I'm confident all apps will act differently in requiring authentication. (Redis, for example, "does not try to implement Access Control", instead only offering a single password for controlled access.)