NFSv4 with sec=krb5 mounts not working under Solaris

[Nicolas Williams]

On Thu, May 25, 2006 at 04:23:26PM -0700, Erich Weiler wrote:
> kadmin: addprinc -randkey nfs/solaris10host.domain.com
> kadmin: ktadd -e des-cbc-crc:normal nfs/solaris10host.domain.com
> 
> /etc/krb5.keytab file was created successfully.  Then, as root on 
> solaris10host:
> 
> % mount -F nfs -o vers=4 -o sec=krb5 nfs4server:/ /mnt
> nfs mount: mount: /mnt: Permission denied
> 
> Can't figure out where I'm going wrong.  Does anyone have any ideas?

Yes: the client doesn't need a nfs/... principal -- it needs a root/...
or host/... principal.

Nico
--