On 26/11/14 09:54, John Hodrien wrote:
On Wed, 26 Nov 2014, Longina Przybyszewska wrote:
> You have to be careful if you use as me, SSSD and NFS4+krb ;
> NFS doesn’t agree on connection with sec=krb5 if hostname doesn't
> match the hostname
> in keytab file.
There's nothing stopping you having RABBITS$@DOMAIN and nfs/fqdn@DOMAIN and
NFS should be perfectly happy. Having correctly defined fqdn princs is
obviously rather important to lots of services.
Simplifying further, only the nfs server needs the nfs/ principal.
Clients are happy with MACHINE$ or host/, which you usually have anyway.