NFSv4

Matt Garman matthew.garman at gmail.com
Mon Sep 30 10:19:07 EDT 2013


I have some experience with NFSv4 + Kerberos.  What exactly are you trying
to accomplish?

For the most part, I do use the default setup.  That is, all my servers
with secure NFSv4 mounts have in their /etc/krb5.keytab both
"host/hostname at REALM" and "nfs/hostname at REALM" entries.

I might be able to help if you give a little more detail to your problem(s).

-Matt



On Sun, Sep 29, 2013 at 11:12 AM, Jaap <jwinius at umrk.nl> wrote:

> Hi folks,
>
> Does anyone here have experience with NFSv4? I'm interested, but its
> Kerberos implementation seems rather inflexible. It appears that nothing
> can be specified and that its single encryption key must be saved in the
> default keytab. A pity, as I prefer to use this file for host keys only
> with application keys kept in separate files to avoid problems.
>
> Any comments?
>
> Thanks,
>
> Jaap
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>


More information about the Kerberos mailing list