Kerberos and NFS V4 Configuration

[Keagle, Chuck]

Turning up the verboseness in rpcgssd did point out a keytab problem.

Thanks for the tip, Kevin.  It's been a long time since I've had to
learn from a firehose.  :-)

The key elemenet here appears to be:

ERROR: No usable keytab entries found inkeytab '/etc/krb5.keytab'
Oct 12 16:34:59 denali rpc.gssd[5052]: Do you have a valid keytab entry
for nfs/<your.host>@<YOUR.REALM> in keytab file /etc/krb5.keytab ?

AIX allows both slim and full clients.

	Slim clients don't need a keytab entry.
	Full clients do.

Maybe a non-AIX client can't be a slim client.

I'll try to get the KDC adminstrator to obtain a keytab entry for nfs on
the Linux host.  I don't have those priviledges.

----
Not all who wander are lost.

                          |     ----  ___o  |  chuck.keagle at boeing.com
Chuck Keagle              |  -------  \ <,  |  Work:  (425) 865-1488
Enterprise Servers:  HPC  |  ----- ( )/ ( ) |  Cell:  (425) 417-3434
http://card.web.boeing.com/Webcard.cfm?id=73990
 

> -----Original Message-----
> From: Kevin Coffman [mailto:kwc at citi.umich.edu] 
> Sent: Thursday, October 12, 2006 4:11 PM
> To: Keagle, Chuck
> Cc: nfsV4 Mailing List
> Subject: Re: Kerberos and NFS V4 Configuration
> 
> On 10/12/06, Keagle, Chuck <chuck.keagle at boeing.com> wrote:
> > Here is one we would like to figure out how to resolve or 
> work around.
> > It has already been posted to the Kerberos Mailing List and a 
> > recommendation was made that this might be a better place for 
> > resolution.
> 
> That was me :-)
> 
> Any output from rpcgssd (run with -vvv) would be helpful.
> 
> K.C.
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Keagle, Chuck.vcf
Type: text/x-vcard
Size: 396 bytes
Desc: Keagle, Chuck.vcf
Url : http://linux-nfs.org/pipermail/nfsv4/attachments/20061012/8c3570f0/KeagleChuck.vcf