On Nov 10, 2010, at 9:38 AM, m.roth at 5-cent.us wrote: > My mamnager's trying to get nfs v4 working with kerboros. One major issue > is that we do *not* have access to the server, or ktadmin - that's the > network folks, and they have AD on the other side. The result is that he > can't create (if I have this right) objects. > > I found > <http://sadiquepp.blogspot.com/2009/02/how-to-configure-nfsv4-with-kerberos-in.html>, > and he says he's done everything and more. > > Any pointers, suggestions, etc? If you used the samba-Kerberos integration you could create service principal names via samba's 'net' utility and samba can auto update the keytab file. All the AD folk would have to do is create a machine account in the domain and give 'Self' full control. -Ross