similar to: Kerberized NFS client and slow user write performance

On 03/22/2017 03:26 PM, Matt Garman wrote: > Is anyone on the list using kerberized-nfs on any kind of scale? Not for a good many years. Are you using v3 or v4 NFS? Also, you can probably stuff the rpc.gss* and idmapd services into verbose mode, which may give you a better ideas as to whats going on. And yes, the kernel does some kerberos caching. I think 10 to 15 minutes.

Matt Garman wrote: > Is anyone on the list using kerberized-nfs on any kind of scale? > We use it here. I don't think I'm an expert - my manager is - but let me think about your issues. <snip> > Just to give a little insight into our issues: we have an > in-house-developed compute job dispatching system. Say a user has > 100s of analysis jobs he wants to run, he

Is anyone on the list using kerberized-nfs on any kind of scale? I've been fighting with this for years. In general, when we have issues with this system, they are random and/or not repeatable. I've had very little luck with community support. I hope I don't offend by saying that! Rather, my belief is that these problems are very niche/esoteric, and so beyond the scope of typical

I have a kerberized SSHD installed on HOST-1, a login server for the outside world. How can I make it so users are still authenticated via kerberos, even though they haven't yet received a ticket? The main reason for this is that a user who is at home, no vpn, but has an ssh client could then login and be authenticated by kerberos using password authentication, get a ticket, then be allowed

Hello, Is it possible to use Dovecot in a fully kerberized mail system? We have configured authentication via kerberos, now we would like the imap deamon to access a kerberized nfs file system. Has any one any experiences? Regards, Matthew. -- Dr Matthew Williams MEng PhD MBCS Systems Administrator - IT Services - Bangor University Prifysgol Bangor Tel: (44) (0)1248 382414

Hi all, I failed to map my network drive my,password is not accepted from windows XP using Kerberized Samba3.0. My server is Red Hat Enterprise Linux. Can some one help with the basic steps in mapping network drive from Windows XP? Or basic configuration with Kerberos 5. I am new to Kerberos 5. Zakaria __________________________________ Do you Yahoo!? Yahoo! Finance Tax Center - File

I have made a bit of progress since I compiled krb5-1.2.6. ./configure --with-cc=gcc --without-krb4 --disable-dns-for-kdc It would be nice if there was an option to just compile client stuff. The resolv library problem went away. I don't know if that was a change to krb5 or to cygwin. Bison problems also went away. Still need to add #include <errno.h> to

Hello, thanks for the time to read this. I am doing a proof of concept in the following context. I have a NT 4.0 domain and because I don't want AD, I am moving towards a MIT Kerberos managed domain which still gives me SSO and thru kerberized SAMBA, file sharing. What I have setup so far is XP workstations SSO into the MIT Kerberos domain, I can access shares on the Samba server

Sigh. Is anyone here working getting K5 kerberized ssh onto Mac OS X? I'm having trouble building with the Apple krb5 and OS X include files - seems fp.h gets sucked in by something, and it's got it's own idea of what "log()" is... Is there a better place to ask this question? Be gentle, please. Thanks. --paw Pat Wilson paw at ucsd.edu

Is anyone currently using CentOS 5.5 with 2008 R2 AD authentication and a fully Kerberized NFSv4? If so would you mind sharing your configuration with me? I have been able to successfully get it working with Windows 2003 as discussed earlier on the list http://lists.centos.org/pipermail/centos/2010-July/096374.html With the exception that I had to use dynamic UIDs on the machine since we

Just a tip... is all server have same time ? not sure that will help you.. ----------------------------------- St?phane PURNELLE Admin. Syst?mes et R?seaux Service Informatique Corman S.A. Tel : 00 32 (0)87/342467 samba-technical-bounces at lists.samba.org wrote on 20/02/2014 10:46:38: > De : Georg Hopp <georg at steffers.org> > A : Sumit

Am 2016-11-28 07:14, schrieb Matthias Kahle via samba: > Hi Folks Hi Matthias, > I'm trying to share user home directories hosted on a Samba-4 member > server via NFSv4. Everything's working well with the Windows shares but > when it comes to kerberized NFSv4 it fails. I can't even mount the > home > root directory via nfs on the server itself ("mount.nfsv4:

Hi Matthias, adding (or better replacing) the userPrincipalName attribute with the nfs/* one, is exactly what you need to do. For some reason the NFS client's request *only* matches the userPrincipalName attribute, while all other services I tried so far are fine when matching one of the values in servicePrincipalName attribute. NFS seems to be a very special kind of kerberos service as it

the following is the current network setup i have running: Unix KDC, Windows Active Directory, and a bunch of clients that dual boot Windows 2k and Fedora Linux. Right now the KDC only supplies the ticket granting ticket to the clients and they use this to get the ticket granting service from the Active Directory. My question is, if I want to map a drive on these clients using Samba, do I have

Hi openSUSE 12.1 server and client. I can't get the s4 fileserver nor uid:gid mappings working with s4. I used nfs and idmapd instead. It's working, but I've a couple of qns. 1. Server fqdn hh3.hh3.site Samba 4, DNS and NFS4 I set up the nfs server with GSSAPI as in this screenshot: http://2.bp.blogspot.com/-IspbLnfxizc/Txsp-Z1z1tI/AAAAAAAAADk/lsgel498elg/s1600/yastnfs1.png The nfs

On Fri, 2 Dec 2016 11:05:50 +0100 Matthias Kahle via samba <samba at lists.samba.org> wrote: > > Does it work if you manually add > > userPrincipalName=CLIENT02.DOMAIN.TLD to your clients ldap entry > > and reexport the keytab? > > I already thought about trying that. So by now, I tried tweaking the > client's LDAP entry. > > Adding > >

On Fri, 02 Dec 2016 12:44:04 +0100 marcel at linux-ng.de wrote: > Am 2016-12-02 12:12, schrieb Rowland Penny via samba: > > On Fri, 2 Dec 2016 11:05:50 +0100 > > Matthias Kahle via samba <samba at lists.samba.org> wrote: > > > >> > Does it work if you manually add > >> > userPrincipalName=CLIENT02.DOMAIN.TLD to your clients ldap entry >

Am 24.07.20 um 14:51 schrieb Rowland penny via samba: > > NFS shares != Samba shares and 'mounting' != hosting Samba shares ;-) > > Up until Samba 4.8.0, 'smbd' (the fileserver component on a Unix domain > member) could contact AD directly, but after 4.8.0 , smbd must now go > through winbind, sssd uses some of the winbind code, so it is > incompatible with

Hi all, again, I'm not knowledgeable about Kerberos, but we have a few users who use it to make sure that it works well on Solaris... so, they would like a Kerberized IMAPd. I tried compiling dovecot --with-gssapi on Solaris Nevada (the current development release), and the configure script choked for a couple of reasons. First, script uses 'grep -qv' in the case that you specify

Am 24.07.20 um 12:57 schrieb Jason Keltz via samba: > > The reason in particular that I was looking at sssd client as opposed to winbind was that? we are running CentOS 7. I know if I want to use the latest Samba 4.12 on the clients, I'll have problems with gnutls because it's outdated in CentOS 7.? Yes, someone has figured out a way around that by compiling a separate gnutls, but