Displaying 6 results from an estimated 6 matches for "userpricipalnam".
Did you mean:
userpricipalname
2016 Dec 02
6
Samba and kerberized NFSv4
...an error anymore. Though I can't access anything on the mounted share but I guess that's OK for now, because the users' home directories hosted there must not be accessible to the root user at all.
However I don't expect that to be the right approach, not only because it requires a userPricipalName for a service but mainly because I even have to add the kerberos REALM ... or am I mistaken there? (please bear with me if that sounds stupid, I'm still somehow new to dealing with kerberos)
Regards,
Mathias
2016 Dec 02
3
Samba and kerberized NFSv4
...nything on the mounted share
>> but I guess that's OK for now, because the users' home directories
>> hosted there must not be accessible to the root user at all.
>>
>> However I don't expect that to be the right approach, not only
>> because it requires a userPricipalName for a service but mainly
>> because I even have to add the kerberos REALM ... or am I mistaken
>> there? (please bear with me if that sounds stupid, I'm still somehow
>> new to dealing with kerberos)
>>
>> Regards,
>> Mathias
>>
>
> I don'...
2016 Dec 02
0
Samba and kerberized NFSv4
...I can't access anything on the mounted share
> but I guess that's OK for now, because the users' home directories
> hosted there must not be accessible to the root user at all.
>
> However I don't expect that to be the right approach, not only
> because it requires a userPricipalName for a service but mainly
> because I even have to add the kerberos REALM ... or am I mistaken
> there? (please bear with me if that sounds stupid, I'm still somehow
> new to dealing with kerberos)
>
> Regards,
> Mathias
>
I don't normally use NFS, but I did try it o...
2016 Dec 02
0
Samba and kerberized NFSv4
...are but I guess that's OK for now, because the users'
> >> home directories hosted there must not be accessible to the root
> >> user at all.
> >>
> >> However I don't expect that to be the right approach, not only
> >> because it requires a userPricipalName for a service but mainly
> >> because I even have to add the kerberos REALM ... or am I mistaken
> >> there? (please bear with me if that sounds stupid, I'm still
> >> somehow new to dealing with kerberos)
> >>
> >> Regards,
> >> Mathias
&...
2016 Dec 02
0
Samba and kerberized NFSv4
...I can't access anything on the mounted share
> but I guess that's OK for now, because the users' home directories
> hosted there must not be accessible to the root user at all.
>
> However I don't expect that to be the right approach, not only because
> it requires a userPricipalName for a service but mainly because I even
> have to add the kerberos REALM ... or am I mistaken there? (please
> bear with me if that sounds stupid, I'm still somehow new to dealing
> with kerberos)
>
> Regards,
> Mathias
2016 Dec 02
4
Samba and kerberized NFSv4
Hi Marcel
thx. for your fast response. I didn't manage to follow up sooner. I had already verbose logging turned on but I don't seem to find the real reason, why the domain controller searchs for a userPrincipalName instead of servicePrincipalName.
Because I wasn't sure whether it is the nfs client process or the server process that failed to get the kerberos ticket when I tried the