Ok,
Simo, I pushed the two patches after testing a little. Thanks Anthony
for testing as well!
Attached, a followup patch, that would also mention servicename, euid
and socketname when debug is enabled.
Thanks,
Guenther
On 19/06/13 18:48, Anthony Messina wrote:
On Wednesday, June 19, 2013 11:48:14 AM Simo Sorce wrote:
> This just changes the configuration file.
>
> I think this is the best way as we do realy want to be able to have
> completely different options for the client and the serve anyways.
>
> Simo.
I can confirm that the following works on a F19 NFS client, so long as
GSSPROXY_SOCKET is either
1. not defined in /etc/sysconfig/nfs, or
2. set to the default of /var/lib/gssproxy/default.sock
using:
nfs-utils-1.2.8-2.0.fc19.x86_64
gssproxy-0.2.3-5.fc19.x86_64
with contents of /etc/gssproxy/gssproxy.conf:
[gssproxy]
[service/nfs-server]
mechs = krb5
socket = /run/gssproxy.sock
cred_store = keytab:/etc/krb5.keytab
trusted = yes
kernel_nfsd = yes
euid = 0
[service/nfs-client]
mechs = krb5
cred_store = keytab:/etc/krb5.keytab
cred_store = ccache:FILE:/var/lib/gssproxy/clients/krb5cc_%U
cred_store = client_keytab:/var/lib/gssproxy/clients/%U.keytab
trusted = yes
euid = 0
-A
_______________________________________________
gss-proxy mailing list
gss-proxy(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/gss-proxy
--
Günther Deschner GPG-ID: 8EE11688
Red Hat gdeschner(a)redhat.com
Samba Team gd(a)samba.org