Setup Secure NFS on Isilon.

Question

Hello All, Has anyone ever had experience in setting up Secure NFS for Isilon? If so, please can you please explain what it is, share your experience and how to go about setting that up? I looked it up, there is some information in 'OneFS Web Administration Guide' but not all. If you can point to some another documentation that would be helpful too. Thanks in advance! -Gavi

markfoster1 · Accepted Answer

You may find these KB articles useful. 16584 - How to configure the Isilon cluster to use Kerberos with NFS in a non-Active Directory environment 165769 - NFS Kerberos Troubleshooting Guide

ACHOUKEKAR · Answer

Do you mean NFS4 with Kerberos? Let me know, I can provide you with some broad steps and directions.

There are only a few steps to perform on the OneFS side. However there are much more steps on the Client, the AD and or the MIT Kerberos server depending on your security infrastructure.

It will help if you explain your setup and what you are trying to accomplish.

gshah1 · Answer

Hi AMOLC, You are right. NFS4 with Kerberos. It would be great help man. Thanks, Gavi

ACHOUKEKAR · Answer

Gavi,

Can you follow above KBs and let us know if they helped?

Are you using this with AD? What version of AD?

Also what OS are your NFS clients how are your NFS clients authenticating to AD / Kerberos Server?

Thanks,

Amol

gshah1 · Answer

AMOLC, I have not yet started to work on this. But when I do, I'll make an update here. Thanks everyone for your wonderful insight.

admin_gal · Answer

Hi, the KB provided (How to configure the Isilon cluster to use Kerberos with NFS in a non-Active Directory environment) does not work. The string "startgssd" is not included in the file. I am testing on OneFS 7.1.1.4

cat /etc/mcp/sys/services/nfs

enable options

NFS Server