Unsolved

29 Posts

452

August 10th, 2021 17:00

, Secure NFS Unity Setup

Hello,

I'm looking for anyone that either has a cheat sheet or knowledge on how to setup secure NFS on a NAS filer. No, I dojn't want the guide I already have that. I'm looking to find someone that maybe a deployment or implementation engineer that can answer a few questions.

I can access my NFS share if not using kerberos just fine using something like this - sudo mount -t nfs -o nfsvers=3 10.x.x.x:/project-1 /mnt/p1-test and ONLY if  set for "sys - client side authentication)

If I try to access with the following, with krb5 enabled - sudo mount -t nfs -o nfsvers=3,sec=krb5 10.x.x.x:/project-1 /mnt/p1-test, I simply get a "permissions denied" message.

I'm using a realm that already exist on our Windows KDC, so I did not create a LInux realm, too much work I didn't want to do and the guide says Windows KDC is fine.

I also notice that on the NAS server when I select the check box for "Secure NFS" this default "Administrator" account shows up and it won't go away no matter what I change it too. Anyone know why that is?

Also, this is a multiprotocol NAS, but this NFS share is just NFS only, no SMB. 

I don't need to install kerberos on ALL of my Linux host do I, because I have sevral 100-1000 of them?

Any help is greatly appreciated.

No Responses!

0 events found

No Events found!

Top