2006-05-15 15:09:34

by Steffen Kolbe

[permalink] [raw]
Subject: NFS4 + ticket handling

I'm planing a migration from v3 to v4 on Debian
(Server:AMD64+Client:i386) because of the 16+ groups problem.
So I would know something about the kerberos handling which was not
found in docu.

@moment I'm using kerberos for user authentication on all systems
against Win2003AD.
System things (e.g nssldap) are solved via a common princ for all
systems "systemuser@realm" and not "systemuser/hostname@realm" because I
don't like to build + manage a separate keytab for every service + every
machine.
Ticket is updated to a special cache via kinit -k -c /etc/.cache

Is such a solution also working with nfs4 or I have to build a special
keytab for nfs and every machine?


best regards
Steffen


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
NFS maillist - [email protected]
https://lists.sourceforge.net/lists/listinfo/nfs