[SSSD-users] FW: NFS+KERB+SSSD Ubuntu 14.04
steve
steve at steve-ss.com
Mon Aug 11 15:37:18 UTC 2014
On Mon, 2014-08-11 at 15:16 +0000, Longina Przybyszewska wrote
>
> I added keytab for nfs principal to the NFS server's /etc/krb5.keytab
>
> root at jota:/# klist -ke
> Keytab name: FILE:/etc/krb5.keytab
> KVNO Principal
> ---- --------------------------------------------------------------------------
> 4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (des-cbc-crc)
> 4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (des-cbc-md5)
> 4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (aes128-cts-hmac-sha1-96)
> 4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (aes256-cts-hmac-sha1-96)
> 4 host/jota.nat.c.sdu.dk at NAT.C.SDU.DK (arcfour-hmac)
> 4 host/JOTA at NAT.C.SDU.DK (des-cbc-crc)
> 4 host/JOTA at NAT.C.SDU.DK (des-cbc-md5)
> 4 host/JOTA at NAT.C.SDU.DK (aes128-cts-hmac-sha1-96)
> 4 host/JOTA at NAT.C.SDU.DK (aes256-cts-hmac-sha1-96)
> 4 host/JOTA at NAT.C.SDU.DK (arcfour-hmac)
> 4 JOTA$@NAT.C.SDU.DK (des-cbc-crc)
> 4 JOTA$@NAT.C.SDU.DK (des-cbc-md5)
> 4 JOTA$@NAT.C.SDU.DK (aes128-cts-hmac-sha1-96)
> 4 JOTA$@NAT.C.SDU.DK (aes256-cts-hmac-sha1-96)
> 4 JOTA$@NAT.C.SDU.DK (arcfour-hmac)
> 4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (des-cbc-crc)
> 4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (des-cbc-md5)
> 4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (arcfour-hmac)
> 4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (aes256-cts-hmac-sha1-96)
> 4 nfs/jota.nat.c.sdu.dk at NAT.C.SDU.DK (aes128-cts-hmac-sha1-96)
Mmm. Once again. The nfs server is serving a different domain to the
client.
Your client will get nothing from this server with that keytab in those
domains!
More information about the sssd-users
mailing list