Re: nfs and kerberos authentification problem.

["J. Bruce Fields" <bfields@fieldses.org>]

On Fri, Sep 05, 2008 at 08:57:16PM +0200, Fran=C3=A7ois Valenduc wrote:
> What I don' understand is that the file system is well mounted read-w=
rite:
> pc-francois:/home/francois on /mnt/pc-francois type nfs =20
> (rw,users,noatime,sec=3Dkrb5,rsize=3D1024,wsize=3D1024,soft,addr=3D19=
2.168.1.2)
>
> The mounted directory has the following permissions:
>
> drwxrwsr-x 77 francois francois 4,0K sep  5 20:35 pc-francois/
>
> So, I don't understand why I can't write any file on it.

The way it would normally work is you'd have a kerberos principal named
"francois-wmZDWbG+120CDknkFGB/9A@public.gmane.org", and you'd run

	kinit francois-wmZDWbG+120CDknkFGB/9A@public.gmane.org

(or that'd be done automatically for you on login if you have the right
pam setup).  When you do an nfs operation then the server will see you
as francois-wmZDWbG+120CDknkFGB/9A@public.gmane.org, look for a local user named "francois", an=
d
use that uid/gid.

But all authentication in nfs is per-user, not per-client, so you need =
a
krb5 principal for each user.

--b.