Re: nfs and kerberos authentification problem.

["J. Bruce Fields" <bfields@fieldses.org>]

On Thu, Sep 04, 2008 at 07:41:17PM +0200, Fran=C3=A7ois Valenduc wrote:
> J. Bruce Fields a =C3=A9crit :
>> On Thu, Sep 04, 2008 at 07:31:11PM +0200, Fran=C3=A7ois Valenduc wro=
te:
>>  =20
>>> I had indeed forgot to add sec=3Dkrb5 to the export options. But ev=
en=20
>>> if I  add it, it doesn't change anything.
>>>    =20
>>
>> OK, and you re-exported?  (Just to double-check--what does exportfs =
-v
>> say?)
>>
>>  =20
>>> Is it really possible to use krb5  authentification with nfs ? I ha=
ve
>>> read a lot of howto and follow the  instructions and it never
>>> succeeds...
>>>    =20
>>
>> I'm sorry you've had trouble with it, but yes, it definitely works--=
I
>> use it every day.
>>
>> --b.
>>
>>  =20
> So, here is the output of exportfs -v relating to my home folder:
> /home/francois  =20
> ordi-francois(rw,wdelay,root_squash,no_subtree_check,sec=3Dkrb5,rw,ro=
ot_squash,no_all_squash)
>

Actually, I forgot, if you're using v3, you probably need to allow
auth_sys mounts as well:

	sec=3Dsys:krb5

(Fixed in the latest kernel git, but that's not released yet.)

--b.