On 26.06.20 11:07, Alexander Bokovoy via FreeIPA-users wrote:
On pe, 26 kesä 2020, Ronald Wimmer via FreeIPA-users wrote:
> Is there any way to make a NetApp SVM an IPA client in order to
> provide a kerberized NFSv4-share?
Two resources I am aware about for NetApp and FreeIPA integration are
done by Justin Parisi from NetApp:
NFS Kerberos support:
https://www.netapp.com/us/media/tr-4616.pdf
This one has great detail on Kerberos/NFS part. I suggested to Justin
some changes earlier over his blog and they are already part of this TR.
How to configure LDAP in ONTAP:
https://www.netapp.com/us/media/tr-4835.pdf
The latter one is still not satisfying to my liking, but both are a very
recent attempt from NetApp side (May 2020) and is fully covering all of
FreeIPA integration they are supporting.
Hi Alexander,
I've already read the first document. What we've managed so far is
creating the SVM host and NFS-ServicePrincipal manually in IPA. With the
corresponding keytab file we could create a kerberized SVM.
Then I've created an automount map reflecting the share on the SVM. What
we could see in the logs is that our AD-user(a)mydomain.at is not known to
the SVM. This part could be solved by an LDAP configuration on the OnTap
side as described in the document?
Cheers,
Ronald