Nfs With Kerberos; For More Information - Novell LINUX ENTERPRISE SERVER 10 SP2 - INSTALLATION AND ADMINISTRATION Installation Manual

38.6 NFS with Kerberos

To use Kerberos authentication for NFS, GSS security must be enabled. To do so, select
Enable GSS Security in the initial YaST dialog. Additionally complete the following
steps:
• Make sure that both the server and the client are in the same Kerberos domain. This
means that they access the same KDC (Key Distribution Center) server and share
their krb5.keytab file (the default location on any machine is /etc/krb5
.keytab).
• Start the gssd service on the client with rcgssd start.
• Start the svcgssd service on the server with rcsvcgssd start.
For further information about configuring kerberized NFS, refer to the links in Sec-
tion 38.7, "For More Information" (page 732).

38.7 For More Information

As well as the man pages of exports, nfs, and mount, information about configuring
an NFS server and client is available in /usr/share/doc/packages/nfs-tils/
README and these Web documents:
Find the detailed technical documentation online at SourceForge
.sourceforge.net/]
For instructions for setting up kerberized NFS, refer to NFS Version 4 Open Source
Reference Implementation
linux/krb5-setup.html]
If you have any questions on NFSv4, refer to the Linux NFSv4 Frequently Asked
Questions [http://www.citi.umich.edu/projects/nfsv4/linux/faq/]
FAQ.
732 Installation and Administration
[http://www.citi.umich.edu/projects/nfsv4/
[http://nfs