Re: nfs and kerberos authentification problem.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Sep 05, 2008 at 08:57:16PM +0200, François Valenduc wrote:
> What I don' understand is that the file system is well mounted read-write:
> pc-francois:/home/francois on /mnt/pc-francois type nfs  
> (rw,users,noatime,sec=krb5,rsize=1024,wsize=1024,soft,addr=192.168.1.2)
>
> The mounted directory has the following permissions:
>
> drwxrwsr-x 77 francois francois 4,0K sep  5 20:35 pc-francois/
>
> So, I don't understand why I can't write any file on it.

The way it would normally work is you'd have a kerberos principal named
"francois@xxxxxxxxxxxxxxx", and you'd run

	kinit francois@xxxxxxxxxxxxxxx

(or that'd be done automatically for you on login if you have the right
pam setup).  When you do an nfs operation then the server will see you
as francois@xxxxxxxxxxxxxxx, look for a local user named "francois", and
use that uid/gid.

But all authentication in nfs is per-user, not per-client, so you need a
krb5 principal for each user.

--b.
--
To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Filesystem Development]     [Linux USB Development]     [Linux Media Development]     [Video for Linux]     [Linux NILFS]     [Linux Audio Users]     [Yosemite Info]     [Linux SCSI]

  Powered by Linux