2011-05-06 21:08:21

by Orion Poplawski

[permalink] [raw]
Subject: Trouble with krb5 mounts with multiple hostnames/networks

We have a setup where some machines have two network connections, one of which
is dedicated for nfs traffic. The nfs network interface will have a hostname
with a "g" suffix. e.g. saga's interface on the nfs network is called "sagag".

This has worked fine for years with nfs3, and am now testing out nfs4/krb5. I
can connect fine with the normal hostname, but trying with the nfs network name
fails:

# mount -t nfs4 -o sec=krb5 alexandriag:/cora2 /mnt
mount.nfs4: Permission denied

I've added krb5 nfs principals for both hostnames in each machine's
/etc/krb5.keytab.

I'm running centos 5.6 with nfs-utils-1.0.9-50.el5.

Is there any hope of this working with nfs4/krb5? Or is this just not going to
fly because of hostname authentication issues?