rpc.gssd

Lukas Hejtmanek xhejtman at ics.muni.cz
Mon Jun 30 10:49:32 EDT 2008


Hello,

does rpc.gssd version 1.1.2 stil honours the man page regarding keytab?

-k keytab
              Tells  rpc.gssd  to  use  the  keys  found  in  keytab to obtain
              "machine credentials".  The default value is "/etc/krb5.keytab".

              Previous  versions  of  rpc.gssd  used  only  "nfs/*" keys found
              within the keytab.  To be more consistent with other implementa‐
              tions,  we  now  look  for  specific keytab entries.  The search
              order for keytabs to be used for "machine credentials" is now:
                root/<hostname>@<REALM>
                nfs/<hostname>@<REALM>
                host/<hostname>@<REALM>
                root/<anyname>@<REALM>
                nfs/<anyname>@<REALM>
                host/<anyname>@<REALM>


I have:
ktutil:  rkt /etc/krb5.keytab 
ktutil:  list
slot KVNO Principal
---- ----
---------------------------------------------------------------------
   1    1                        nfs/xhejtman at META
   2    1                        nfs/xhejtman at META
   3    1                        nfs/xhejtman at META
   4    1                        nfs/xhejtman at META

But rpc.gssd compains about none suitable entery in the keytab. Should it
work?

-- 
Lukáš Hejtmánek


More information about the NFSv4 mailing list