| View previous topic :: View next topic |
| Author |
Message |
da5idii
n00b
Joined: 09 Aug 2006
Posts: 8
Location: San Antonio
|
 Posted: Thu Apr 03, 2008 6:49 am Post subject: kerberos and nfs4 mount failure |
 |
|
I am trying use kerberos and nfsv4 but i can not seem to get it to work, when whenever i try to mount i get:
mount.nfsv4: Permission denied,
the system log read:
rpc.gssd: WARNING: Failed to create krb5 context for user with uid 0 for server XXX
rpc.gssd: WARNING: Failed to create krb5 context for user with uid 0 with credentials cache FILE:/tmp/krb5cc_machine_XXX for server XXX
rpc.gssd: WARNING: Failed to create krb5 context for user with uid 0 with any credentials cache for server XXX
Can anybody help please |
|
| Back to top |
|
 |
Herring42
Guru
Joined: 10 Mar 2004
Posts: 373
Location: Buckinghamshire
|
| Posted: Mon Aug 11, 2008 6:29 pm Post subject: |
|
|
I'm having this problem too...
_________________
"The problem with quotes on the internet is that it is difficult
to determine whether or not they are genuine." -- Abraham Lincoln |
|
| Back to top |
|
|
tarpman
Veteran
Joined: 04 Nov 2004
Posts: 1083
Location: Victoria, BC, Canada
|
| Posted: Tue Aug 12, 2008 7:12 am Post subject: |
|
|
You need to add keys to your local keytab. On the machine having the problem, run:
| Code: | | kadmin -q 'ktadd -e des-cbc-crc:normal nfs/hostname.fqdn@REALM' |
Specifying the encryption type may or may not be necessary. It's always worked for me when I've specified it, and sometimes has and sometimes hasn't when I haven't.
If it still doesn't work, please give the output of:
| Code: | hostname
cat /etc/hosts
cat /etc/krb5.conf
klist -ek |
_________________
Saving the world, one kilobyte at a time. |
|
| Back to top |
|
|
Herring42
Guru
Joined: 10 Mar 2004
Posts: 373
Location: Buckinghamshire
|
| Posted: Tue Aug 12, 2008 7:49 am Post subject: |
|
|
Thanks, I had done that already (I've had this working for a year!)
The problem was that after a reboot, rpc.svcgssd had not restarted. I've read elsewhere that it sometimes crashes.
/etc/init.d/nfs restart solved the problem.
_________________
"The problem with quotes on the internet is that it is difficult
to determine whether or not they are genuine." -- Abraham Lincoln |
|
| Back to top |
|
|
|
Networking & Security
