[SSSD-users] FW: NFS+KERB+SSSD Ubuntu 14.04

steve steve at steve-ss.com
Mon Aug 11 15:37:18 UTC 2014


On Mon, 2014-08-11 at 15:16 +0000, Longina Przybyszewska wrote
>  
> I added  keytab for nfs principal to the NFS server's /etc/krb5.keytab 
> 
> root at jota:/# klist -ke
> Keytab name: FILE:/etc/krb5.keytab
> KVNO Principal
> ---- --------------------------------------------------------------------------
>    4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (des-cbc-crc) 
>    4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (des-cbc-md5) 
>    4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (aes128-cts-hmac-sha1-96) 
>    4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (aes256-cts-hmac-sha1-96) 
>    4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (arcfour-hmac) 
>    4 host/JOTA at NAT.C.SDU.DK (des-cbc-crc) 
>    4 host/JOTA at NAT.C.SDU.DK (des-cbc-md5) 
>    4 host/JOTA at NAT.C.SDU.DK (aes128-cts-hmac-sha1-96) 
>    4 host/JOTA at NAT.C.SDU.DK (aes256-cts-hmac-sha1-96) 
>    4 host/JOTA at NAT.C.SDU.DK (arcfour-hmac) 
>    4 JOTA$@NAT.C.SDU.DK (des-cbc-crc) 
>    4 JOTA$@NAT.C.SDU.DK (des-cbc-md5) 
>    4 JOTA$@NAT.C.SDU.DK (aes128-cts-hmac-sha1-96) 
>    4 JOTA$@NAT.C.SDU.DK (aes256-cts-hmac-sha1-96) 
>    4 JOTA$@NAT.C.SDU.DK (arcfour-hmac) 
>    4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (des-cbc-crc) 
>    4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (des-cbc-md5) 
>    4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (arcfour-hmac) 
>    4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (aes256-cts-hmac-sha1-96) 
>    4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (aes128-cts-hmac-sha1-96)

Mmm. Once again. The nfs server is serving a different domain to the
client.

Your client will get nothing from this server with that keytab in those
domains!



More information about the sssd-users mailing list