On 02/29/2012 03:32 PM, J. Bruce Fields wrote:
On Wed, Feb 29, 2012 at 03:26:33PM +0100, steve wrote:
On 02/29/2012 03:09 PM, J. Bruce Fields wrote:
On Wed, Feb 29, 2012 at 03:04:28PM +0100, steve wrote:
On 29/02/12 13:44, J. Bruce Fields wrote:
On Wed, Feb 29, 2012 at 12:22:30AM +0100, steve wrote:
We are authenticating against Samba4, so our domain user accounts
are under Kerberos.
Kerberos works fine with v3.
--b.
Hi
Unfortunately, it doesn't seem to. We just tried it, and anyone
(with or without a ticket) gets access:-(
Could you give any more detail about your test?
--b.
steve is a /etc/passwd user
steve@hh3:~$ sudo su
[sudo] password for steve:
root@hh3:/home/steve# mount -t nfs4 hh3:/home /mnt -o sec=krb5
root@hh3:/home/steve# exit
exit
steve@hh3:~$ cd /mnt
bash: cd: /mnt: Permission denied
steve@hh3:~$ sudo su
root@hh3:/home/steve# umount /mnt
root@hh3:/home/steve# mount -t nfs hh3:/home /mnt -o sec=krb5
root@hh3:/home/steve# exit
exit
steve@hh3:~$ cd /mnt
steve@hh3:/mnt$
Why is that a problem? You haven't actually accessed anything on the
filesystem.
--b.
Steve can access the mounted folder. I can live with that but the acl
still isn't working:
lynn2 has authinticated by Kerberos
root@hh3:~# setfacl -d -m g::rw /home/CACTUS/dropbox
root@hh3:~# mount -t nfs hh3:/home /mnt -o sec=krb5
lynn2@hh3:/mnt/CACTUS$ ls -la
total 28
drwxr-xr-x 6 root root 4096 2012-02-27 14:24 .
drwxr-xr-x 4 root root 4096 2012-02-18 18:52 ..
drwxrws--- 3 root debusers 4096 2012-02-29 15:31 dropbox
drwxr-xr-x 20 lynn2 debusers 4096 2012-02-26 16:43 lynn2
drwxrwxrwx 5 root root 4096 2012-02-29 14:19 profiles
drwxr-xr-x 4 steve2 Domain Users 4096 2012-02-29 14:36 steve2
lynn2 then crates a file in the mount called l3:
lynn2@hh3:/mnt/CACTUS$ ls -la /home/CACTUS/dropbox/
total 20
drwxrws---+ 3 root debusers 4096 2012-02-29 15:31 .
drwxr-xr-x 6 root root 4096 2012-02-27 14:24 ..
-rw-r----- 1 lynn2 debusers 0 2012-02-29 15:31 a
drwxrwS---+ 2 root debusers 4096 2012-02-29 14:28 adminfolder
-rw-rw---- 1 lynn2 debusers 0 2012-02-25 23:23 l2
-rw-r----- 1 lynn2 debusers 0 2012-02-29 15:24 l3
-rw-rw---- 1 lynn2 debusers 0 2012-02-26 16:20 lynn2-ubuntu.txt
-rw-rw---- 1 lynn2 debusers 11 2012-02-26 00:46 lynnnautilus.txt
??
Cheers,
Steve
--
To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
