Differences

This shows you the differences between two versions of the page.

--- linux_wiki:use_kerberos_to_control_access_to_nfs_network_shares [2018/04/14 16:41]
billdozor
+++ linux_wiki:use_kerberos_to_control_access_to_nfs_network_shares [2019/05/25 23:50] (current)
@@ Line 37: / Line 37: @@
 ====== NFS Server ======
+**On server2** (NFS Server/KDC).
 \\
@@ Line 43: / Line 45: @@
 kadmin
-addprinc -randkey nfs/server2.example.com
+kadmin: addprinc -randkey nfs/server2.example.com
-ktadd nfs/server2.example.com
+kadmin: ktadd nfs/server2.example.com
+kadmin: exit
 </code>
@@ Line 72: / Line 76: @@
 exportfs -var
 </code>
-\\
-LinuxAcademy.com says a reboot is needed at this point for the client to work consistently. -> **TO INVESTIGATE**
 ----
@@ Line 80: / Line 81: @@
 ====== NFS Client ======
+**On server1** (NFS Client/Kerberos Client)
+\\
 Add NFS principal and add local copy of keytab file
 <code bash>
 kadmin
-addprinc -randkey nfs/server1.example.com
+kadmin: addprinc -randkey nfs/server1.example.com
-ktadd nfs/server1.example.com
+kadmin: ktadd nfs/server1.example.com
+kadmin: exit
 </code>
@@ Line 93: / Line 99: @@
 systemctl enable nfs-client.target
 systemctl start nfs-client.target
-</code>
-\\
+# If it was already running, restart it
-Temporary mount
+systemctl restart nfs-client.target
-<code bash>
-mount -t nfs4 -o sec=krb5 server2.example.com:/krbdata /mnt
 </code>
 \\
-Permanent mount
+Persistent mount
 <code bash>vim /etc/fstab
-server2.example.com:/krbdata  /mnt  nfs4  sec=krb5  0  0
+server2.example.com:/krbdata  /mnt  _netdev,nfs4  sec=krb5  0  0
+</code>
+\\
+Mount the filesystem
+<code bash>
+mount -a
 </code>
+  * If you see this error message "mount.nfs: an incorrect mount option was specified" -> Ensure that you restarted the 'nfs-client.target' service.
 \\