Re: nfs and kerberos authentification problem.

["J. Bruce Fields" <bfields@fieldses.org>]

On Thu, Sep 04, 2008 at 07:58:56PM +0200, Fran=C3=A7ois Valenduc wrote:
> J. Bruce Fields a =C3=A9crit :
>> On Thu, Sep 04, 2008 at 07:41:17PM +0200, Fran=C3=A7ois Valenduc wro=
te:
>>  =20
>>> J. Bruce Fields a =C3=A9crit :
>>>    =20
>>>> On Thu, Sep 04, 2008 at 07:31:11PM +0200, Fran=C3=A7ois Valenduc w=
rote:
>>>>        =20
>>>>> I had indeed forgot to add sec=3Dkrb5 to the export options. But=20
>>>>> even if I  add it, it doesn't change anything.
>>>>>            =20
>>>> OK, and you re-exported?  (Just to double-check--what does exportf=
s -v
>>>> say?)
>>>>
>>>>        =20
>>>>> Is it really possible to use krb5  authentification with nfs ? I =
have
>>>>> read a lot of howto and follow the  instructions and it never
>>>>> succeeds...
>>>>>            =20
>>>> I'm sorry you've had trouble with it, but yes, it definitely works=
--I
>>>> use it every day.
>>>>
>>>> --b.
>>>>
>>>>        =20
>>> So, here is the output of exportfs -v relating to my home folder:
>>> /home/francois   =20
>>> ordi-francois(rw,wdelay,root_squash,no_subtree_check,sec=3Dkrb5,rw,=
root_squash,no_all_squash)
>>>
>>>    =20
>>
>> Actually, I forgot, if you're using v3, you probably need to allow
>> auth_sys mounts as well:
>>
>> 	sec=3Dsys:krb5
>>
>> (Fixed in the latest kernel git, but that's not released yet.)
>>
>> --b.
>>
>>  =20
> I have changed it and it's still the same. The main problem seems to =
be =20
> the uid and gid mapping. I still get this line:
>
> clnt: nfs-dcgn+4npE+/HutES1ELsHGk/OX1frD/lW0UTeDyZ6EE@public.gmane.org, uid: -1, gid:               =
    =20
>                                                         -1, num aux g=
rps:=20
> 0

Nah, that's normal--I get the same thing, and everything still works.

Unless maybe the directory you're exporting really requires a particula=
r
uid?  What are the permissions on the directory you're exporting?

--b.

>
> But, exportfs -v now gives the following:
> /home/francois  =20
> ordi-francois(rw,wdelay,root_squash,no_subtree_check,sec=3Dsys:krb5,r=
w,root_squash,no_all_squash)
>
> The line in fstab on the client is the following:
> pc-francois:/home/francois      /mnt/pc-francois        nfs     =20
> rw,noatime,rsize=3D1024,wsize=3D1024,soft,sec=3Dkrb5,noauto,users 0 0
>
> What else should I do ? I can get a krb5 ticket but this is not enoug=
h =20
> to mount the filesystem.
>
> Fran=C3=A7ois