On to, 01 elo 2019, Boyd Ako via FreeIPA-users wrote:
Are you retrieving existing key or the key does not exist yet?
Created the host and
the service. Not entirely sure about creating a key.
What does 'ipa service-show NFS/...' show?
[root@ipa
binary]# ipa service-show nfs/abyss.neverland.ddns.me
Principal name: NFS/abyss.neverland.ddns.me(a)NEVERLAND.DDNS.ME
Principal alias: NFS/abyss.neverland.ddns.me(a)NEVERLAND.DDNS.ME
Keytab: False
Managed by: abyss.neverland.ddns.me
Hosts allowed to retrieve keytab: ipa.neverland.ddns.me
Does it have 'Keytab: True' in the output?
Apparently
no... How do I change it to true?
BTW, for NFS your service principal has to be nfs/..., not NFS/....
This is described in the man page for rpc.gssd, section "Machine
credentials".
Well the Web UI seems to have made them with caps.