How to use NFS with multiple principals in different realms?

Cedric Blancher cedric.blancher at gmail.com
Thu Sep 4 07:25:13 EDT 2014


On 4 September 2014 11:33, Jurjen Bokma <j.bokma at rug.nl> wrote:
> You use cross realm authentication, so that your NFS client may obtain
> tickets for servers that are not in its own realm.

What if I cannot use cross realm authentication? For example if both
realms do not like each other?
What if I really have to kinit into multiple realms? Kerberos since
1.10 can do that and klist now has a new flag -A to list all entries
if KRB5CCNAME points to a directory, e.g.
KRB5CCNAME=DIR:/tmp/krbcc$UID/

Ced
-- 
Cedric Blancher <cedric.blancher at gmail.com>
Institute Pasteur


More information about the Kerberos mailing list