Displaying 9 results from an estimated 9 matches for "need_idmapd".
2018 Oct 09
10
NFSv4, homes, Kerberos...
I was used to integrate some linux client in my samba network mounting
homes with 'unix extensions = yes', and works as expected, at least
with some old lubuntu derivatives. Client side i use 'pam_mount'.
Now i'm working on a ubuntu mate derivative, and i've not found a way
to start the session properly in CIFS.
If i create a plain local home (pam_mkhome), session start as
2018 Oct 10
1
NFSv4, homes, Kerberos...
...des-cbc-crc des-cbc-md5
> >
> > # Server settings for NFSv4
> > sed -i 's/NEED_SVCGSSD=""/NEED_SVCGSSD="yes"/g'
> /etc/default/nfs-kernel-server
> > sed -i 's/NEED_STATD=/NEED_STATD=no/g' /etc/default/nfs-common
> > sed -i 's/NEED_IDMAPD=/NEED_IDMAPD=yes/g' /etc/default/nfs-common
> > sed -i 's/NEED_GSSD=/NEED_GSSD=yes/g' /etc/default/nfs-common
> >
> > Idmap.conf
> > Add in [general]
> > Domain = internal.domain.tld
> > Local-Realm = YOUR.REALM
> >
> > kinit Administrator...
2018 Oct 09
0
NFSv4, homes, Kerberos...
...128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
# Server settings for NFSv4
sed -i 's/NEED_SVCGSSD=""/NEED_SVCGSSD="yes"/g' /etc/default/nfs-kernel-server
sed -i 's/NEED_STATD=/NEED_STATD=no/g' /etc/default/nfs-common
sed -i 's/NEED_IDMAPD=/NEED_IDMAPD=yes/g' /etc/default/nfs-common
sed -i 's/NEED_GSSD=/NEED_GSSD=yes/g' /etc/default/nfs-common
Idmap.conf
Add in [general]
Domain = internal.domain.tld
Local-Realm = YOUR.REALM
kinit Administrator
net ads keytab add nfs/hostname1.internal.domain.tld at YOUR.REALM -k
# The...
2018 Oct 10
0
NFSv4, homes, Kerberos...
...-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
>
> # Server settings for NFSv4
> sed -i 's/NEED_SVCGSSD=""/NEED_SVCGSSD="yes"/g'
> /etc/default/nfs-kernel-server
> sed -i 's/NEED_STATD=/NEED_STATD=no/g' /etc/default/nfs-common
> sed -i 's/NEED_IDMAPD=/NEED_IDMAPD=yes/g' /etc/default/nfs-common
> sed -i 's/NEED_GSSD=/NEED_GSSD=yes/g' /etc/default/nfs-common
>
> Idmap.conf
> Add in [general]
> Domain = internal.domain.tld
> Local-Realm = YOUR.REALM
>
> kinit Administrator
> net ads keytab add nfs/hostname...
2018 Oct 11
2
NFSv4, homes, Kerberos...
...only need todo 1 of these 2. ( b or c )
>
> d) configure server settings:
> sed -i 's/NEED_SVCGSSD=""/NEED_SVCGSSD="yes"/g' /etc/default/nfs-kernel-server
> sed -i 's/NEED_STATD=/NEED_STATD=no/g' /etc/default/nfs-common
> sed -i 's/NEED_IDMAPD=/NEED_IDMAPD=yes/g' /etc/default/nfs-common
> sed -i 's/NEED_GSSD=/NEED_GSSD=yes/g' /etc/default/nfs-common
Yes, correct needed for all nfs server startups
Type : systemctl cat nfs*
And see all nfs systemd nfs services at once.
Dont forget to enable it : systemctl enable nfs-kern...
2020 Jul 24
0
samba4 kerberized nfs4 with sssd ad client
...s nfs/$(hostname -f) -U Administrator
### Server1 (NFS exports setup)
# /etc/default/nfs-kernel-server
NEED_SVCGSSD="yes"
### Server1 and 2 (NFS Server and client) ! only need if you setup as shown on server 1.
/etc/default/nfs-common
NEED_STATD="yes"
STATDOPTS="no"
NEED_IDMAPD="yes"
NEED_GSSD="yes"
### Server 1 (NFS export setup)
# create the nfs shared folder.
install -o root -g root -d -m 1777 /exports/users
# and load the exports.
exportfs -rav
systemctl restart nfs-server nfs-client
### Server1 and 2.
mkdir /home/users # ( the linux homedi...
2020 Jul 24
4
samba4 kerberized nfs4 with sssd ad client
Hi everyone,
I have a samba DC, let's call it dc1.ad.example.com.
I have two members of the domain - server1.ad.example.com and
server2.ad.example.com.?? They are not running smbd and winbind.
Instead, they are running SSSD with AD backend.
I want to create an NFSv4 export on server1.ad.example.com and mount it
on server2.ad.example.com (say, sec=krb5).
I found some instructions online
2015 Sep 07
2
nfs based shared home dir question
...:---
default:group:root:---
default:group:BUILTIN\134administrators:rwx
default:mask::rwx
default:other::---
i mounted the folder on the client server
this is the mount option
# NFS V4 Test
servername.internal.domain.tld:/users2 /home/users2 nfs4 sec=krb5 0 0
In /etc/default/nfs-common: NEED_IDMAPD=yes NEED_GSSD=yes NEED_STATD=no
/etc/idmap.conf ( on both servers )
Domain = internal.domain.tld
[Mapping]
Nobody-User = nobody
Nobody-Group = nogroup
[Translation]
Method = nsswitch
cat /etc/nsswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionali...
2015 Sep 04
4
nfs based shared home dir question
Hai..
I need to have my home dirs shared over some of my servers.
I did setup a nfs4 kerberos base
Debian jessie, samba 4.1.17 and sernet samba 4.1.3 on these servers.
This works, i can mount without problems.
But because verything is created with the windows user tools, the owner/Group is root.
Like this
Server:
ls -al
drwxrwx---+ 2 root root 4096 Sep 4 13:17