Questions NFS4 with kerberos

[utz lehmann]

Hi

We have the problem that we need NFS with support for 100+ unix groups.
I made some tests with NFS4/krb5 and have some questions:

For my understanding a user need a valid kerberos ticket to access the
nfs mount. If not it gives access denied.

I had the problem that a mount was forbidden to access after a day the
user was loggt in. Is this because the ticket has expired?
How to solve this? We need that the mounts are accessible for users for
weeks.

And what is about non-root cronjobs or non-root processes which are
started from root (queueing system). They don't have a kerberos ticket.
How can they access the nfs mount?

And with a fedora core 5 systems i have only 32 groups. How can this be
extended?


thanks

utz


-- 
    <>        utz lehmann
  <>  <>      u.lehmann at de.tecosim.com
<>  <>  <>    TECOSIM GmbH / IT
  <>  <>      +49(0)-6142-82720
    <>        http://www.tecosim.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://linux-nfs.org/pipermail/nfsv4/attachments/20060823/795e2a37/attachment.pgp