Kerberized NFS

Client Configuration

  • in /etc/idmap.conf, add
    Local-Realms = CLASSE.CORNELL.EDU, LNS.CORNELL.EDU
  • SL6: in /etc/sysconfig/nfs, add
    SECURE_NFS="yes" 
    RPCSVCGSSDARGS="-n" 
  • SL7:
  • Join the client to CLASSE AD.
  • enable and start rpc.gssd (rpcgssd service on SL6, rpc-gssd service on SL7)

Usage

  • mount -o sec=krb5 chessraw:/mnt/raw /mnt/raw

This topic: Computing > KerberizedNFS
Topic revision: 02 Apr 2019, dab66
This site is powered by FoswikiCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding CLASSE Wiki? Send feedback