2

OpenSuse 11.3 nfsv4: client to nfs4 server (OpsenSuse11.0) with kerberos does not work!

view story
linux-howto

http://forums.opensuse.org – After installing OpenSuse 11.3 on a client I am trying to mount the home-share via nfsv4/krb5 on the OpenSuse 11.0 server. Userlogin via ldap/krb5 works fine. Kerberos login via kinit works also. Only mounting the share with sec=krb5 gives the error message mount.nfs4: access denied by server while mounting server.domain:/home I get a machine credential Mounting without sec=krb5 works fine. GSS/krb5 works fine with all other clients under OpenSuse 11.0, 11.1 and 11.2. Is there a incompatibility between krb5 on 11.3 and 11.0? Ha anyone experien (Distributions)

xskl's picture
Submitted by xskl on 07/26/2010

Stories similar to OpenSuse 11.3 nfsv4: client to nfs4 server (OpsenSuse11.0) with kerberos does not work!

I copied somebody's NFS server/client setup verbatim and am having trouble making sense of what's going on with it. This is the /etc/exports:

/export *(rw,fsid=0,crossmnt,insecure,async,no_subtree_check,sec=krb5p:krb5i:krb5) /export/home *(rw,insecure,async,no_subtree_check,sec=krb5p:krb5i:krb5)

Client machines use autofs to mount user home directories on demand.

I have an nfs server running Solaris. It works fine and a large number of clients happily mount directories from it. But only almost all clients.

All clients that have problem run CentOS (5.4 and 5.5). I've found one or two of each version that fail, but also a couple of each version that work.

The mounting is done via autofs but that doesn't seem to make any difference.

Mandriva: 2010:071: krb5 3 years 5 weeks ago

LinuxSecurity.com: A vulnerability has been found and corrected in krb5: Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a [More...]

Hello all,

I've problem with Kerberos authentication in Firefox included in Ubuntu. I've correctly configured Apache with krb5 module and tgt generated for user on workstation. When I'm using chromium-browser (with --auth-server-whitelist=my.domain parameter) on this workstation, everything works fine. Firefox installed on Windows workstation also is using Kerberos authentication.

Hi ,

I tried to configure nis with kerberos authentication, and i think i configured my server correctly coz i already configured nis with kerberos earlier and it was working fine but not today i getting error.

I can not use nfs from F10 client to F12 server. nfs mount on F10 to F12 times out anf nfs4 mount gives "mount.nfs4: mounting localhost:/home failed, reason given by server: No such file or directory" I have tried to close firewall and set selinux to permissive mode on both client and server with same result. Samba works fine.

Kerberos setup on Red Hat 36 weeks 1 day ago

I'm using Red Hat 5 client to authenticate to a Windows 2003 KDC (or trying to anyway), but when I run

kinit vwwebseal@VWXAUTHN.LOCAL

I get

kinit(v5): Cannot find KDC for requested realm while getting initial credentials

When I use nslookup, the Red Hat machine can successfully look up the KDC:

[root@vwwebseal ~]# nslookup vwkdc.vwxauthn.local Server: 10.150.26.64 Address: 10

I have to set up a samba share with authentication against AD, for a customer. The network have some weirds settings.

There is one domain. Bu almost all users have an alias.

Sftp chroot + winbind + ad 28 weeks 1 day ago

I have next configuration : - AIX 5.3 (5300-11-03-1013) - pWare.SAMBA 3.5.8.1 - OpenSSH 5.2.0 - OpenSSL 0.9.8

Now, to be more clearly I'll explain what I need indeed. My task is set up integration AIX server to Active Directory 2008 with Samba (Winbind) for chrooted SSH connections. It means our developers should login into AIX server by own AD acounts with SFTP and upload/download files on it.