Displaying 9 results from an estimated 9 matches for "need_idmapd".
2018 Oct 09
10
NFSv4, homes, Kerberos...
I was used to integrate some linux client in my samba network mounting
homes with 'unix extensions = yes', and works as expected, at least
with some old lubuntu derivatives. Client side i use 'pam_mount'.
Now i'm working on a ubuntu mate derivative, and i've not found a way
to start the session properly in CIFS.
If i create a plain local home (pam_mkhome), session start as
2018 Oct 10
1
NFSv4, homes, Kerberos...
...des-cbc-crc des-cbc-md5
> >
> > # Server settings for NFSv4
> > sed -i 's/NEED_SVCGSSD=""/NEED_SVCGSSD="yes"/g' 
> /etc/default/nfs-kernel-server
> > sed -i 's/NEED_STATD=/NEED_STATD=no/g' /etc/default/nfs-common
> > sed -i 's/NEED_IDMAPD=/NEED_IDMAPD=yes/g' /etc/default/nfs-common
> > sed -i 's/NEED_GSSD=/NEED_GSSD=yes/g' /etc/default/nfs-common
> >
> > Idmap.conf
> > Add in [general]
> > Domain = internal.domain.tld
> > Local-Realm = YOUR.REALM
> >
> > kinit Administrator...
2018 Oct 09
0
NFSv4, homes, Kerberos...
...128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
# Server settings for NFSv4 
sed -i 's/NEED_SVCGSSD=""/NEED_SVCGSSD="yes"/g' /etc/default/nfs-kernel-server
sed -i 's/NEED_STATD=/NEED_STATD=no/g' /etc/default/nfs-common
sed -i 's/NEED_IDMAPD=/NEED_IDMAPD=yes/g' /etc/default/nfs-common
sed -i 's/NEED_GSSD=/NEED_GSSD=yes/g' /etc/default/nfs-common
Idmap.conf
Add in [general] 
Domain = internal.domain.tld
Local-Realm = YOUR.REALM
kinit Administrator
net ads keytab add nfs/hostname1.internal.domain.tld at YOUR.REALM -k
# The...
2018 Oct 10
0
NFSv4, homes, Kerberos...
...-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
> 
> # Server settings for NFSv4 
> sed -i 's/NEED_SVCGSSD=""/NEED_SVCGSSD="yes"/g' 
> /etc/default/nfs-kernel-server
> sed -i 's/NEED_STATD=/NEED_STATD=no/g' /etc/default/nfs-common
> sed -i 's/NEED_IDMAPD=/NEED_IDMAPD=yes/g' /etc/default/nfs-common
> sed -i 's/NEED_GSSD=/NEED_GSSD=yes/g' /etc/default/nfs-common
> 
> Idmap.conf
> Add in [general] 
> Domain = internal.domain.tld
> Local-Realm = YOUR.REALM
> 
> kinit Administrator
> net ads keytab add nfs/hostname...
2018 Oct 11
2
NFSv4, homes, Kerberos...
...only need todo 1 of these 2.  ( b or c ) 
> 
> d) configure server settings:
> 	sed -i 's/NEED_SVCGSSD=""/NEED_SVCGSSD="yes"/g' /etc/default/nfs-kernel-server
> 	sed -i 's/NEED_STATD=/NEED_STATD=no/g' /etc/default/nfs-common 
>     sed -i 's/NEED_IDMAPD=/NEED_IDMAPD=yes/g' /etc/default/nfs-common
> 	sed -i 's/NEED_GSSD=/NEED_GSSD=yes/g' /etc/default/nfs-common
Yes, correct needed for all nfs server startups 
Type : systemctl cat nfs*
And see all nfs systemd nfs services at once.
Dont forget to enable it :  systemctl enable nfs-kern...
2020 Jul 24
0
samba4 kerberized nfs4 with sssd ad client
...s nfs/$(hostname -f) -U Administrator
### Server1  (NFS exports setup)
# /etc/default/nfs-kernel-server
NEED_SVCGSSD="yes"
### Server1 and 2 (NFS Server and client) ! only need if you setup as shown on server 1.
/etc/default/nfs-common
NEED_STATD="yes"
STATDOPTS="no"
NEED_IDMAPD="yes"
NEED_GSSD="yes"
### Server 1 (NFS export setup) 
# create the nfs shared folder.
install -o root -g root -d -m 1777 /exports/users
# and load the exports. 
exportfs -rav
systemctl restart nfs-server nfs-client 
### Server1 and 2. 
mkdir /home/users  # ( the linux homedi...
2020 Jul 24
4
samba4 kerberized nfs4 with sssd ad client
Hi everyone,
I have a samba DC, let's call it dc1.ad.example.com.
I have two members of the domain - server1.ad.example.com and 
server2.ad.example.com.?? They are not running smbd and winbind. 
Instead, they are running SSSD with AD backend.
I want to create an NFSv4 export on server1.ad.example.com and mount it 
on server2.ad.example.com (say, sec=krb5).
I found some instructions online
2015 Sep 07
2
nfs based shared home dir question
...:---
default:group:root:---
default:group:BUILTIN\134administrators:rwx
default:mask::rwx
default:other::---
i mounted the folder on the client server 
this is the mount option
# NFS V4 Test
servername.internal.domain.tld:/users2 /home/users2    nfs4 sec=krb5  0 0    
In /etc/default/nfs-common: NEED_IDMAPD=yes NEED_GSSD=yes NEED_STATD=no
/etc/idmap.conf  ( on both servers ) 
Domain = internal.domain.tld
[Mapping]
Nobody-User = nobody
Nobody-Group = nogroup
[Translation]
Method = nsswitch
cat /etc/nsswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionali...
2015 Sep 04
4
nfs based shared home dir question
Hai.. 
 
I need to have my home dirs shared over some of my servers. 
I did setup a nfs4 kerberos base 
Debian jessie, samba 4.1.17 and sernet samba 4.1.3 on these servers. 
 
This works, i can mount without problems. 
 
But because verything is created with the windows user tools, the owner/Group is root. 
Like this 
 
Server:  
ls -al 
drwxrwx---+  2 root  root 4096 Sep  4 13:17