NFS4 and GSSAPI

[Kevin Coffman]

On 8/27/07, Lukas Hejtmanek <xhejtman at ics.muni.cz> wrote:
> Kevin,
>
> On Mon, Aug 27, 2007 at 12:01:43PM -0400, Kevin Coffman wrote:
> > You are running as root on the client.  All accesses as root currently
> > use the machine credentials (nfs/<machine>@REALM), not those in
> > /tmp/krb5cc_0.  nfs-utils-1.0 has a work-around for this (-n option).
>
> thanks, that was the reason.
>
> Anyway, I guess, I'm using nfs-utils-1.0 (1.0.10 actually - nfs-common package
> in Debian/Sid). So, how can I enable (or make work-around) the root access via
> Krb?

That wasn't a typo on my part.  (1.0.10 != 1.1.0)  The new option is
in nfs-utils-1.1.0
with source available from
http://www.kernel.org/pub/linux/utils/nfs/
or
http://sourceforge.net/project/showfiles.php?group_id=14&package_id=174&release_id=507588

If 1.1.0 is not yet available for debian, some pre-reqs and
instructions for building from source are available here:
http://www.citi.umich.edu/projects/nfsv4/linux/
http://www.citi.umich.edu/projects/nfsv4/linux/user-build.html