[Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Andrew Wasielewski
Hello everyone, I am setting up FreeIPA for a small home network. However I have a problem mounting NFS shares with Kerberos enables - see syslog output below. My NFS, KDC and FreeIPA servers are all on the same host. I am running the NFS mount directly on the server, which has local firewall

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Ondrej Valousek
bile Původní zpráva Od: Andrew Wasielewski Datum: Komu: freeipa-users@redhat.com Předmět: [Freeipa-users] Problem with Kerberised NFS mount Hello everyone, I am setting up FreeIPA for a small home network. However I have a problem mounting NFS shares with Kerberos enables - see syslog ou

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Simo Sorce
On Fri, 2013-07-12 at 14:51 +, Ondrej Valousek wrote: > Hard to say. > In general, when dealing w/ nfs & kerberos, I would advise to: > ● Upgrade to the latest fedora > ● Make sure idmapper is configured and working fine > ● Limit krb enctypes to 3des-cbc-crc (not sure if your kernel can > hand

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Ondrej Valousek
,freeipa-users@redhat.com Předmět: RE: [Freeipa-users] Problem with Kerberised NFS mount Hard to say. In general, when dealing w/ nfs & kerberos, I would advise to: ● Upgrade to the latest fedora ● Make sure idmapper is configured and working fine ● Limit krb enctypes to 3des-cbc-crc (not sure if

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Chuck Lever
m is working on this problem. > O. > > > Odesláno ze Samsung Mobile > > > > Původní zpráva > Od: Ondrej Valousek > Datum: > Komu: and...@wasielewski.co.uk,freeipa-users@redhat.com > Předmět: RE: [Freeipa-users] Problem with Kerberised

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Adamson, Andy
and...@wasielewski.co.uk<mailto:and...@wasielewski.co.uk>,freeipa-users@redhat.com<mailto:freeipa-users@redhat.com> Předmět: RE: [Freeipa-users] Problem with Kerberised NFS mount Hard to say. In general, when dealing w/ nfs & kerberos, I would advise to: ● Upgrade to the latest fedo

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Rob Crittenden
Chuck Lever wrote: On Jul 12, 2013, at 2:43 PM, Ondrej Valousek mailto:ovalou...@vendavo.com>> wrote: Just back to the Kerberized NFS. Any solution to RH bugzilla #786463 on the horizon yet? Expiring tickets will render the whole concept unusable otherwise. Anyone? Ask on linux-...@vger.ker

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Ondrej Valousek
Od: "Adamson, Andy" Datum: Komu: Ondrej Valousek Kopie: and...@wasielewski.co.uk,freeipa-users@redhat.com Předmět: Re: [Freeipa-users] Problem with Kerberised NFS mount On Jul 12, 2013, at 2:43 PM, Ondrej Valousek mailto:ovalou...@vendavo.com>> wrote: Just back to the Ker

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Dean Hunter
> > > > > > > > Anyone? > > O. > > > > > > > > > > Odesláno ze Samsung Mobile > > > > > > > > > > ---- Původní zpráva > > Od: Ondrej Valousek > > Datum: > > Komu: and...@wasiel

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Dmitri Pal
le to help. > >> -->Andy >> >>> >>> >>> Anyone? >>> O. >>> >>> >>> >>> >>> Odesláno ze Samsung Mobile >>> >>> >>> >>> ---- Pu*vodní zpráva ---

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-12 Thread Dean Hunter
On Fri, 2013-07-12 at 16:52 -0400, Dmitri Pal wrote: > F19 has GSS proxy. I encourage you to use it. I know it was tried and > worked as several bugs have been addressed. > Gunther CCed will be back from PTO next week and should be able to > help. Is the GSS proxy configured by ipa-client-auto

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-15 Thread Adamson, Andy
On Jul 12, 2013, at 3:02 PM, Rob Crittenden wrote: > Chuck Lever wrote: >> >> On Jul 12, 2013, at 2:43 PM, Ondrej Valousek > > wrote: >> >>> Just back to the Kerberized NFS. Any solution to RH bugzilla #786463 >>> on the horizon yet? >>> Expiring tickets will ren

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-15 Thread Simo Sorce
On Fri, 2013-07-12 at 17:15 -0500, Dean Hunter wrote: > On Fri, 2013-07-12 at 16:52 -0400, Dmitri Pal wrote: > > F19 has GSS proxy. I encourage you to use it. I know it was tried > > and worked as several bugs have been addressed. > > Gunther CCed will be back from PTO next week and should be able

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-15 Thread Simo Sorce
On Fri, 2013-07-12 at 19:16 +, Adamson, Andy wrote: > On Jul 12, 2013, at 3:02 PM, Rob Crittenden > wrote: > > > Chuck Lever wrote: > >> > >> On Jul 12, 2013, at 2:43 PM, Ondrej Valousek >> > wrote: > >> > >>> Just back to the Kerberized NFS. Any solution to

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-15 Thread Simo Sorce
On Mon, 2013-07-15 at 08:50 -0500, Dean Hunter wrote: > On Mon, 2013-07-15 at 09:33 -0400, Simo Sorce wrote: > > On Fri, 2013-07-12 at 17:15 -0500, Dean Hunter wrote: > > > On Fri, 2013-07-12 at 16:52 -0400, Dmitri Pal wrote: > > > > F19 has GSS proxy. I encourage you to use it. I know it was trie

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-15 Thread Dean Hunter
On Mon, 2013-07-15 at 09:33 -0400, Simo Sorce wrote: > On Fri, 2013-07-12 at 17:15 -0500, Dean Hunter wrote: > > On Fri, 2013-07-12 at 16:52 -0400, Dmitri Pal wrote: > > > F19 has GSS proxy. I encourage you to use it. I know it was tried > > > and worked as several bugs have been addressed. > > >

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-15 Thread Ondrej Valousek
Datum: Komu: "Adamson, Andy" Kopie: and...@wasielewski.co.uk,freeipa-users@redhat.com Předmět: Re: [Freeipa-users] Problem with Kerberised NFS mount On Fri, 2013-07-12 at 19:16 +, Adamson, Andy wrote: > On Jul 12, 2013, at 3:02 PM, Rob Crittenden > wrote: > > > Chuck

Re: [Freeipa-users] Problem with Kerberised NFS mount

2013-07-15 Thread Simo Sorce
uk,freeipa-users@redhat.com > Předmět: Re: [Freeipa-users] Problem with Kerberised NFS mount > > > > On Fri, 2013-07-12 at 19:16 +, Adamson, Andy wrote: > > On Jul 12, 2013, at 3:02 PM, Rob Crittenden > > wrote: > > > > > Chuck Lever wrote: >