14

Does an NFS export with sec=krb5 *require* that the parent directory also be exported with sec=krb5?

view full story
linux-howto

http://serverfault.com – I copied somebody's NFS server/client setup verbatim and am having trouble making sense of what's going on with it. This is the /etc/exports: /export *(rw,fsid=0,crossmnt,insecure,async,no_subtree_check,sec=krb5p:krb5i:krb5) /export/home *(rw,insecure,async,no_subtree_check,sec=krb5p:krb5i:krb5) Client machines use autofs to mount user home directories on demand. Here's auto.home: * -fstype=nfs4,rw,soft,sec=krb5 192.168.0.2:/home/& This works and works well. Still, exporting /export seems unnecessary so I commented that line out of the server config. Now automounting fails on (HowTos)

dayu's picture
Submitted by dayu on 05/20/2012 – Made popular on 05/20/2012

Stories similar to Does an NFS export with sec=krb5 *require* that the parent directory also be exported with sec=krb5?

After installing OpenSuse 11.3 on a client I am trying to mount the home-share via nfsv4/krb5 on the OpenSuse 11.0 server. Userlogin via ldap/krb5 works fine. Kerberos login via kinit works also. Only mounting the share with sec=krb5 gives the error message mount.nfs4: access denied by server while mounting server.domain:/home I get a machine credential

I'm setting up an Ubuntu NFS server with a Solaris 10 client. The basic configuration looks okay to me, and it was also working for some time.

Hello. I'm tying to access an NFS4 file share that I've set-up but all I keep getting is permission denied.

Hello,

I've inherited an NFS setup that allows external servers to write to an NFS share on a Centos box.

I'm having trouble since 2 days with autofs. I have a Solaris 11 Server. There I share the folder /export/home with the following command:

share -o rw -d „Freigabe von /export/home“ /export/home

My Client is a Fedora 17. On Fedora I created the folder /ahome, where all home folders should be mounted with autofs. I gave permissions 777 to /ahome.

need help awk /etc/exportfs 44 weeks 17 hours ago

Need help awk out information from /etc/exports :wall: cat /etc/exports /%filesystem -sec=sys:krb5p:krb5i:krb5:dh,rw,access=server1:server2:server3:server(n+1)

I wanted to edit out (-sec ......,access=) remove the colons and replace is with spaces

output

/%filesystem server1 server2 server3 server4 server(n+1).....

I have an nfs server running Solaris. It works fine and a large number of clients happily mount directories from it. But only almost all clients.

All clients that have problem run CentOS (5.4 and 5.5). I've found one or two of each version that fail, but also a couple of each version that work.

The mounting is done via autofs but that doesn't seem to make any difference.

Mandriva: 2010:071: krb5 3 years 5 weeks ago

LinuxSecurity.com: A vulnerability has been found and corrected in krb5: Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a [More...]

Hello

I use Ubuntu 10.4 LTS, and I have a remote server that exports my home directory. I use autofs to automatically mount it. However, since a recent upgrade, it no longer works.