similar to: AD to Kerberos + LDAP + NFS migration

Hi there, I have a Samba installation acting as a Domain Member with a disk share (the partiton is mounted with acl and user_xattr options). I am not using winbind, because I want the domain users to be mapped to Unix users. Everything works right, excepting the users in the Windows Explorer security tab. I will try to explain the situation with an example. I have username map, that maps

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi All, I've got a problem with kerberoized NFS server , i can't start rpc.svcgssd daemon on my server. shaver ~ # rpc.svcgssd -fvvv ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure. Minor code may provide more information - No principal in keytab matches desired name Unable to obtain credentials for 'nfs' unable

Hi all, I have a question about NFS datastore and unsafe migration. When migrating a virtual machine having a virtio disk in writeback cache between two hosts sharing a single NFS datastore, I get the following error: "Unsafe migration: Migration may lead to data corruption if disks use cache != none or cache != directsync" I understand why libvirt alerts for unsafe migration in

Greetings, Not sure if this is the correct mail list. I have the following test environment set up: - 1x ipa master = ipa1.example.com - 1x nfs server = nfs1.example.com - 1x nfs client = nfsclient1.example.com NFS version 4 is used and the appropriate Kerberos principal has been created in IPA: [root at nfs1 ~]# ipa service-show nfs/nfs1.example.com at EXAMPLE.COM Principal:

On 11/12/2020 8:52 AM, Rowland penny via samba wrote: > On 12/11/2020 13:27, Jason Keltz via samba wrote: >> >> On 11/12/2020 8:17 AM, Rowland penny via samba wrote: >>> On 11/11/2020 10:54, Jason Keltz via samba wrote: >>>> Hi Louis, >>>> I've looked into that and I'm not sure how this would be done? >>>> By the way, even with

2014/1/6 Darod Zyree <darodzyree at gmail.com> > Greetings, > > Not sure if this is the correct mail list. > > I have the following test environment set up: > - 1x ipa master = ipa1.example.com > - 1x nfs server = nfs1.example.com > - 1x nfs client = nfsclient1.example.com > > NFS version 4 is used and the appropriate Kerberos principal has been > created in

Well, my problem is i dont now how Centos/RH is handing this. I just know that the basics are.. 1) The server must have A and PTR record. (optional you can use CNAMEs as long A+PTR match). 2) you use nfs/$(hostname -f) and add this in the local keytab and in the computer object$ net ads keytab add_update_ads nfs/$(hostname -f) ( you dont add the REALM here ) ! 3) i know nfs

On 11/12/2020 8:17 AM, Rowland penny via samba wrote: > On 11/11/2020 10:54, Jason Keltz via samba wrote: >> Hi Louis, >> I've looked into that and I'm not sure how this would be done? >> By the way, even with your NFS translation fix (which doesn't work >> for me because gssproxy), do you do this before accessing root files..? >> sudo root >>

Dear ALL, IHAC who would like to use Sun Fire X4500 to be the NFS server for the backend services, and would like to see the potential performance gain comparing to their existing systems. However the outputs of the I/O stress test with iozone show the mixed results as follows: * The read performance sharply degrades (almost down to 1/20, i.e from 2,000,000 down to 100,000) when the

Hi Louis, I've looked into that and I'm not sure how this would be done? By the way, even with your NFS translation fix (which doesn't work for me because gssproxy), do you do this before accessing root files..? sudo root kinit -k 'host$' ? Jason. On Nov. 11, 2020, 2:48 a.m., at 2:48 a.m., "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: >Hai

Hai, Now, the only thing thats different here is, i do this on a member and on Debian I think if you read this : https://www.spinics.net/lists/samba/msg165144.html You have the info you need in there, at least i think, it does contain all things you need. If this is a samba member we are talking about. This its already joined. Add the spn to the HOSTNAME$ and let winbind refresh the keytab.

On 11/11/2020 10:54, Jason Keltz via samba wrote: > Hi Louis, > I've looked into that and I'm not sure how this would be done? > By the way, even with your NFS translation fix (which doesn't work for me because gssproxy), do you do this before accessing root files..? > sudo root > kinit -k 'host$' > OK, after a bit of a battle, I now have a Centos 7 Unix

On 09/11/2020 19:41, Jason Keltz via samba wrote: > Hi. > > I have Samba AD configured correctly, and can mount kerberized NFS > from all the CentOS 7 clients.? I'm not able to use "root" on the > client even though the nfs export specifies the option: no_root_squash > option. > > I completely understand that in order to use the "root" identity

On 12/11/2020 14:19, Jason Keltz via samba wrote: > > On 11/12/2020 8:52 AM, Rowland penny via samba wrote: >> On 12/11/2020 13:27, Jason Keltz via samba wrote: >>> >>> On 11/12/2020 8:17 AM, Rowland penny via samba wrote: >>>> On 11/11/2020 10:54, Jason Keltz via samba wrote: >>>>> Hi Louis, >>>>> I've looked into that

Both pc13267 and pc14113 run CentOS 5.5. On pc14113, my test user gets a home directory when logging in, but not on pc13267. But why? All logs below are from /var/log/messages. I have removed dates and stuff from the beginning of lines to make them more readable, and then grouped lines about the same thing from both machines. > pc13267 Using keytab file '/etc/krb5.keytab' >

On 12/11/2020 13:27, Jason Keltz via samba wrote: > > On 11/12/2020 8:17 AM, Rowland penny via samba wrote: >> On 11/11/2020 10:54, Jason Keltz via samba wrote: >>> Hi Louis, >>> I've looked into that and I'm not sure how this would be done? >>> By the way, even with your NFS translation fix (which doesn't work >>> for me because

Hai Jason, Hmm, yes, well, only one thing i can think of now is And thats the last one.. Is the server allowed to delelagate kerberos services? If you have set that also? It's the last thing i can remember. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Jason Keltz via samba > Verzonden: dinsdag 10 november

On 09/11/2020 20:20, Jason Keltz via samba wrote: > On 11/9/2020 3:00 PM, Rowland penny via samba wrote: >>> I figured that I should just need to do a "kinit Administrator" on >>> the client, and take on the root identity, then I could write as >>> root where I have no_root_squash configured...? However, when I >>> tried this on a client, I get a

On 11/9/2020 3:57 PM, Rowland penny via samba wrote: > On 09/11/2020 20:20, Jason Keltz via samba wrote: >> On 11/9/2020 3:00 PM, Rowland penny via samba wrote: >>>> I figured that I should just need to do a "kinit Administrator" on >>>> the client, and take on the root identity, then I could write as >>>> root where I have no_root_squash

Hi. I have Samba AD configured correctly, and can mount kerberized NFS from all the CentOS 7 clients.? I'm not able to use "root" on the client even though the nfs export specifies the option: no_root_squash option. I completely understand that in order to use the "root" identity (which doesn't exist as a user in the domain) on the NFS client, this identity has to