[CentOS] Problems with NFS version 4 & Kerberos

Aaron Lewis
2010-05-23T04:41:17Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi All,

I've got a problem with kerberoized NFS server , i can't start
rpc.svcgssd daemon on my server.

shaver ~ # rpc.svcgssd -fvvv

ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.
Minor code may provide more information - No principal in keytab matches
desired name
Unable to obtain credentials for 'nfs'
unable to obtain root (machine) credentials
do you have a keytab entry for nfs/<your.host>@<YOUR.REALM> in
/etc/krb5.keytab?

shaver ~ # klist -k
Keytab name: FILE:/etc/krb5.keytab
KVNO Principal
- ----
- --------------------------------------------------------------------------
   2 nfs/shaver.aaron.net at AARON.NET
   2 nfs/shaver.aaron.net at AARON.NET
   2 nfs/shaver.aaron.net at AARON.NET
   2 nfs/shaver.aaron.net at AARON.NET
   2 host/shaver.aaron.net at AARON.NET
   2 host/shaver.aaron.net at AARON.NET
   2 host/shaver.aaron.net at AARON.NET
   2 host/shaver.aaron.net at AARON.NET


shaver ~ # hostname
shaver.aaron.net

shaver ~ # domainname
shaver.aaron.net

Kerberos works well on client , i just thought i've got problems with
principal name.

Appreciate any of your help ;-)

Thanks.

- --
Best Regards,
Aaron Lewis - PGP: 0x4A6D32A0
FingerPrint EA63 26B2 6C52 72EA A4A5 EB6B BDFE 35B0 4A6D 32A0
irc: A4r0n on freenode
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkv4se0ACgkQvf41sEptMqAZswCglOKzYbRD5KHMmaZWhfP+NcOX
AI4AnjeQqp8OCHh+K67wuq3r99JMGoFU
=Xd5s
-----END PGP SIGNATURE-----