Nfs With Kerberos; For More Information - Novell LINUX ENTERPRISE SERVER 11 - ADMINISTRATION Administration Manual

25.6 NFS with Kerberos

To use Kerberos authentication for NFS, GSS security must be enabled. To do so, select
Enable GSS Security in the initial YaST dialog. Note, that you must have a working
Kerberos server to use this feature. YaST does not set up the server but only uses the
provided functionality. If you want to use Kerberos authentication in addition to the
YaST configuration, complete at least the following steps before running the NFS
configuration:
1 Make sure that both the server and the client are in the same Kerberos domain.
This means that they access the same KDC (Key Distribution Center) server and
share their krb5.keytab file (the default location on any machine is /etc/
krb5.keytab).
2 Start the gssd service on the client with rcgssd start.
3 Start the svcgssd service on the server with rcsvcgssd start.
For further information about configuring kerberized NFS, refer to the links in
tion 25.7, "For More Information"

25.7 For More Information

As well as the man pages of exports, nfs, and mount, information about configuring
an NFS server and client is available in /usr/share/doc/packages/nfsidmap/
README. Online documentation can be found at the following Web documents:
• Find the detailed technical documentation online at SourceForge
.sourceforge.net/].
• For instructions for setting up kerberized NFS, refer to NFS Version 4 Open Source
Reference Implementation
nfsv4/linux/krb5-setup.html].
• If you have any questions on NFSv4, refer to the Linux NFSv4 Frequently Asked
Questions [http://www.citi.umich.edu/projects/nfsv4/linux/
faq/] FAQ.
(page 359).
[http://www.citi.umich.edu/projects/
Sec-
[http://nfs
Sharing File Systems with NFS 359