On Fri, 2015-11-20 at 14:09 -0500, James Ralston wrote:
On Tue, Nov 17, 2015 at 6:31 PM, Simo Sorce <simo(a)redhat.com>
wrote:
> On 17/11/15 15:28, James Ralston wrote:
>
> > Red Hat claims to support NFSv4.1 clients and servers on RHEL7.
> > Do you know if NFS 4.1/4.2 support is also a known issue with
> > sec=krb5 with Microsoft AD, or is this an issue you haven't heard
> > about?
>
> I am not aware of any difference in the kernel or userspace code
> when it comes to rpcgss handling, please open a case/bugzilla, if
> you are seeing something beyond BZ#1213852.
It looks like your assistance will be needed with this one:
https://bugzilla.redhat.com/show_bug.cgi?id=1283341
From what I can read the problem is entirely in kernel, where it refuses
to use a valid principal name.
> > On the NFS client, is there a way to tell gssproxy to use
the
> > $KRB5CCNAME credentials if I sudo to root, instead of using the
> > client's host credentials from /etc/krb5.keytab?
>
> I think what you want is achieved with the rpc.gssd -n argument
Yes, but then NFS4.0 mounts with sec=krb5 break. :-(
:-/
I'll file a separate bug for that.
Thanks.
Simo.
--
Simo Sorce * Red Hat, Inc * New York