Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-11 Thread Longina Przybyszewska
> No, not that simple ;( - sorry for typing fail. What, 'typing fail'? ...when editing debugging output for posting to mailinglist > > Mount command: > mount -t nfs4 -o rw,sec=krb5 jota.nat.c.example.com:/nfs /nfs Your server is not in that domain. ___

Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-11 Thread John Hodrien
On Mon, 11 Aug 2014, steve wrote: Maybe easier to delete both server and client keytabs and recreate them. You can save a bit of time since the nfs/ key is necessary only on the server. The client is happy with MACHINE$. As long as you have sufficiently recent nfs-utils, which in this case you

Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-11 Thread steve
On Mon, 2014-08-11 at 09:44 +0100, John Hodrien wrote: > > Check kvno lines up correctly for all machine credentials. When in doubt, > delete the machine objects and start again. +1 Maybe easier to delete both server and client keytabs and recreate them. You can save a bit of time since the nfs

Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-11 Thread steve
On Mon, 2014-08-11 at 08:20 +, Longina Przybyszewska wrote: > No, not that simple ;( - sorry for typing fail. What, 'typing fail'? > > Mount command: > mount -t nfs4 -o rw,sec=krb5 jota.nat.c.example.com:/nfs /nfs Your server is not in that domain. ___

Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-11 Thread John Hodrien
On Mon, 11 Aug 2014, Longina Przybyszewska wrote: No, not that simple ;( - sorry for typing fail. Mount command: mount -t nfs4 -o rw,sec=krb5 jota.nat.c.example.com:/nfs /nfs or 'mountall' with the following entry in /etc/fstab : jota.nat.c.example.com:/nfs /nfsnfs4 rw,sec=krb5 0 0

Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-11 Thread Longina Przybyszewska
t 2014 17:54 To: End-user discussions about the System Security Services Daemon Subject: Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04 > > I expect to be able to mount NFS share with sec=krb5 as root on client > using machine credentials. What mount command are you using? mount.nfs4 -o

Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-10 Thread steve
On Sun, 2014-08-10 at 15:54 +, Longina Przybyszewska wrote: The nfs server is serving: jota.nat.c.sdu.dk nfs/jota.nat.c.sdu...@nat.c.sdu.dk Your client is not in that domain: host/jedi.nat.c.example@nat.c.example.com José ___ sssd-users mai

Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-10 Thread Longina Przybyszewska
> > I expect to be able to mount NFS share with sec=krb5 as root on client > using machine credentials. What mount command are you using? mount.nfs4 -o rw,sec=krb5 jota.nat.c.example.com:/nfs /nfs or entry in /etc/fstab: (mount on boot, or with 'mountall' as root) jota.nat.c.sdu.dk:/nfs /nf

Re: [SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-08 Thread steve
On Fri, 2014-08-08 at 15:01 +, Longina Przybyszewska wrote: > > I expect to be able to mount NFS share with sec=krb5 as root on client > using machine credentials. What mount command are you using? Is root a domain user who can get a ticket? Usually she isn't. Is the user mentioned on the mo

[SSSD-users] NFS+KERB+SSSD Ubuntu 14.04

2014-08-08 Thread Longina Przybyszewska
Hi, I really struggle with "permission denied" while mounting NFS share with sec=krb5; Both machines(Ubuntu 14.04) , NFS client and server are configured with SSSD, and authentication seems to work (only one test user for configuration with PoSIX ids ;) 'getent passwd longina' returns correct