search for: server_fqdn

.../kerberos/sbin/kadmin.local -q '" + command + "'") + if ret != 0: + raise + +def get_ip(hostname): + return socket.gethostbyname(hostname) + +default_realm = krbV.Context().default_realm + +# In the following tuple, [0] is fqdn, [2] is ip address +server_fqdn = socket.gethostbyaddr(socket.gethostname())[0] + +rsyslog_princ = 'rsyslog/' + server_fqdn + '@' + default_realm +outname = '/etc/krb5.keytab' + +kadmin_local('addprinc -randkey ' + rsyslog_princ) +kadmin_local('ktadd -k ' + outname + ' ' + rsyslog_p...

...xpected daemons are present, including rpc.gssd and rpc.svcgssd. I have rpc.svcgssd running on the clients too, although it should not be necessary there (but the CentOS init scripts don't give the option to not start it). > Can the user browse using nfs3? > mount -t nfs3 -o sec=krb5 <server_fqdn>:/data /mnt No; exactly the same result as NFSv4. But yes with sec=sys. > Have a look at the gotchas. There's loadsa wrong info abut kerberos and > nfs4: http://linux-nfs.org/wiki/index.php/Nfsv4_configuration That's one of the many articles that I've read (several times). I...

...xpected daemons are present, including rpc.gssd and rpc.svcgssd. I have rpc.svcgssd running on the clients too, although it should not be necessary there (but the CentOS init scripts don't give the option to not start it). > Can the user browse using nfs3? > mount -t nfs3 -o sec=krb5 <server_fqdn>:/data /mnt No; exactly the same result as NFSv4. But yes with sec=sys. > Have a look at the gotchas. There's loadsa wrong info abut kerberos and > nfs4: http://linux-nfs.org/wiki/index.php/Nfsv4_configuration That's one of the many articles that I've read (several times). I...