Re: nfs and kerberos authentification problem.

["François Valenduc" <francois.valenduc@skynet.be>]

J. Bruce Fields a =C3=A9crit :
> On Thu, Sep 04, 2008 at 07:41:17PM +0200, Fran=C3=A7ois Valenduc wrot=
e:
>  =20
>> J. Bruce Fields a =C3=A9crit :
>>    =20
>>> On Thu, Sep 04, 2008 at 07:31:11PM +0200, Fran=C3=A7ois Valenduc wr=
ote:
>>>  =20
>>>      =20
>>>> I had indeed forgot to add sec=3Dkrb5 to the export options. But e=
ven=20
>>>> if I  add it, it doesn't change anything.
>>>>    =20
>>>>        =20
>>> OK, and you re-exported?  (Just to double-check--what does exportfs=
 -v
>>> say?)
>>>
>>>  =20
>>>      =20
>>>> Is it really possible to use krb5  authentification with nfs ? I h=
ave
>>>> read a lot of howto and follow the  instructions and it never
>>>> succeeds...
>>>>    =20
>>>>        =20
>>> I'm sorry you've had trouble with it, but yes, it definitely works-=
-I
>>> use it every day.
>>>
>>> --b.
>>>
>>>  =20
>>>      =20
>> So, here is the output of exportfs -v relating to my home folder:
>> /home/francois  =20
>> ordi-francois(rw,wdelay,root_squash,no_subtree_check,sec=3Dkrb5,rw,r=
oot_squash,no_all_squash)
>>
>>    =20
>
> Actually, I forgot, if you're using v3, you probably need to allow
> auth_sys mounts as well:
>
> 	sec=3Dsys:krb5
>
> (Fixed in the latest kernel git, but that's not released yet.)
>
> --b.
>
>  =20
I have changed it and it's still the same. The main problem seems to be=
=20
the uid and gid mapping. I still get this line:

clnt: nfs-dcgn+4npE+/HutES1ELsHGk/OX1frD/lW0UTeDyZ6EE@public.gmane.org, uid: -1,=20
gid:                                                                   =
        =20
-1, num aux grps: 0

But, exportfs -v now gives the following:
/home/francois =20
ordi-francois(rw,wdelay,root_squash,no_subtree_check,sec=3Dsys:krb5,rw,=
root_squash,no_all_squash)

The line in fstab on the client is the following:
pc-francois:/home/francois      /mnt/pc-francois        nfs    =20
rw,noatime,rsize=3D1024,wsize=3D1024,soft,sec=3Dkrb5,noauto,users 0 0

What else should I do ? I can get a krb5 ticket but this is not enough=20
to mount the filesystem.

=46ran=C3=A7ois