Displaying 1 result from an estimated 1 matches for "1d0h0m".
Did you mean:
100m
2016 Aug 01
0
kerberized nfs4 homedir and local account access (www-data)
....conf
[libdefaults]
default_realm = DOMAIN
dns_lookup_realm = false
dns_lookup_kdc = true
[domain_realm]
.domain = DOMAIN
domain = DOMAIN
[appdefaults]
pam = {
forwardable = true
minimum_uid = 10000
ignore_k5login = true
ticket_lifetime = 1d0h0m
debug = false
ccache = FILE:/tmp/krb5cc_%u
}
7. Generating krb5.keytab file by : "net ads keytab create"
8. Mounting nfs4 share with sec=krb5 option
All work fine, a domain user can log on the computer and receive a
kerberos ticket at login. The user can use the sha...