[SSSD-users] NFS+KERB+SSSD Ubuntu 14.04
Longina Przybyszewska
longina at sdu.dk
Mon Aug 11 08:20:57 UTC 2014
No, not that simple ;( - sorry for typing fail.
Mount command:
mount -t nfs4 -o rw,sec=krb5 jota.nat.c.example.com:/nfs /nfs
or 'mountall' with the following entry in /etc/fstab :
jota.nat.c.example.com:/nfs /nfs nfs4 rw,sec=krb5 0 0
On server /etc/exports:
/nfs *(rw,crossmnt,no_subtree_check,sec=krb5)
I can't see there is a 'user' option for nfs mount.
Best
Longina
-----Original Message-----
From: sssd-users-bounces at lists.fedorahosted.org [mailto:sssd-users-bounces at lists.fedorahosted.org] On Behalf Of Longina Przybyszewska
Sent: 10. august 2014 17:54
To: End-user discussions about the System Security Services Daemon
Subject: Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04
>
> I expect to be able to mount NFS share with sec=krb5 as root on client
> using machine credentials.
What mount command are you using?
mount.nfs4 -o rw,sec=krb5 jota.nat.c.example.com:/nfs /nfs
or entry in /etc/fstab: (mount on boot, or with 'mountall' as root)
jota.nat.c.sdu.dk:/nfs /nfs nfs rw,sec=krb5 0 0
Is root a domain user who can get a ticket?
no (is machine's root she or he :) ??)
Usually she isn't.
Is the user mentioned on the mount command?
no - no user in options...
best,
Longina
_______________________________________________
sssd-users mailing list
sssd-users at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
More information about the sssd-users
mailing list