[CentOS] kerboros and nfs v4

Wed Nov 10 23:51:46 UTC 2010
Ross Walker <rswwalker at gmail.com>

On Nov 10, 2010, at 9:38 AM, m.roth at 5-cent.us wrote:

> My mamnager's trying to get nfs v4 working with kerboros. One major issue
> is that we do *not* have access to the server, or ktadmin - that's the
> network folks, and they have AD on the other side. The result is that he
> can't create (if I have this right) objects.
> 
> I found
> <http://sadiquepp.blogspot.com/2009/02/how-to-configure-nfsv4-with-kerberos-in.html>,
> and he says he's done everything and more.
> 
> Any pointers, suggestions, etc?

If you used the samba-Kerberos integration you could create service principal names via samba's 'net' utility and samba can auto update the keytab file.

All the AD folk would have to do is create a machine account in the domain and give 'Self' full control.

-Ross