Hi all,

I'm new to LQ.org, so hello to all!

I'm trying to enable NFS (supports v4 and v3) (for an exported /home) with kerberos 5 on a CentOS 4.4 system. I have an MIT KRB5 realm setup that I use pam for login credentials. I've also got Fedora Directory Server for my LDAP implementation to keep standard UID and GID POSIX accounts on all my systems.

I'm interested in only allowing a proper ticketed kerberos principal to mount to NFS (no random local root performing a #su - someuser and able to auto mount /home/someuser)

I've been able to get NFS working fine using the following configuration (w/o kerberos). A user can login from the login prompt, contact FDS via LDAP for the POSIX user account, kerberos5 for the password, and mount the /home/akerberosuser.


nfs server:
-----------
/etc/exports
/home *(rw,fsid=0,insecure,sync)

/etc/sysconfig/nfs
# NFS port numbers (to use with firewall)
STATD_PORT=10002
STATD_OUTGOING_PORT=10003
MOUNTD_PORT=10004
RQUOTAD_PORT=10005

/etc/modprobe.conf
options lockd nlm_tcpport=10000 nlm_udpport=10001

nfs client:
-----------
/etc/auto.master
/home /etc/auto.home

/etc/auto.home
* -fstyle=nfs,soft,intr,rsize=8192,wsize=8192,tcp mynfsserver:/home/&


I've been searching for a clear cut example on what options need to go where to enable this. I've seen some examples showing:

/etc/exports
/home gss/krb5(rw,fsid=0,insecure,sync)

or (both):
/home *(rw,fsid=0,insecure,sync)
/home gss/krb5(rw,fsid=0,insecure,sync)

and client such as:

/etc/auto.home
* -fstyle=nfs,soft,intr,rsize=8192,wsize=8192,tcp,sec=krb5 mynfsserver:/home/&

I have not been able to get this to work. Can anyone please point me in the correct direction?

Many thanks,
Jonathan