Re: About the purpose of client host principals for NFS

2023-10-09 Thread Simo Sorce
On Sun, 2023-10-08 at 03:03 +0200, Marco Rebhan via Kerberos wrote: > On Saturday, 7 October 2023 22:15:32 CEST Russ Allbery wrote: > > [..] > > That clears up a lot, thank you so much! Keying clients is useful to allow mount at boot time, before any user with valid credentials has logged in, as

Re: About the purpose of client host principals for NFS

2023-10-07 Thread Marco Rebhan via Kerberos
On Saturday, 7 October 2023 22:15:32 CEST Russ Allbery wrote: > [..] That clears up a lot, thank you so much! -Marco signature.asc Description: This is a digitally signed message part. Kerberos mailing list Kerberos@mit.edu https://mail

Re: About the purpose of client host principals for NFS

2023-10-07 Thread Russ Allbery
Marco Rebhan via Kerberos writes: > What purpose does the host principal for clients serve here? I assumed > it would be either used to authenticate hosts before they're allowed to > obtain a TGT, or authenticate for mounting NFS shares, but clearly > that's not the case since it works without. I

About the purpose of client host principals for NFS

2023-10-07 Thread Marco Rebhan via Kerberos
Hey list, I'm currently setting up Kerberos for my home network. The main motivation was to get secure NFS, and as such I've looked at various guides on how to set it up for that. They (for example, the Arch Wiki[1]) pretty much all tell you to create principals for the host and NFS service for