Re: [opensuse] Switch off GSS for NFS?

On 09/02/15 21:01, Andrei Borzenkov wrote:

В Mon, 09 Feb 2015 20:05:12 +0100 buhorojo пишет:

...

On 09/02/15 19:58, Andrei Borzenkov wrote

...

Kerberos support is mandatory for NFSv4. Really? For NFS version 4, the RPCSEC_GSS security flavor MUST be used to enable the mandatory security mechanism. Other flavors, such as, AUTH_NONE, AUTH_SYS, and AUTH_DH MAY be implemented as well.

and further

The Kerberos V5 GSS-API mechanism as described in [RFC1964] MUST be implemented and provide the following security triples.

May be explicitly restricting export to AUTH_SYS could help. Maybe that was true in the early days. These days, you use it just like you always did. No need for all that fsid0 bind mounted pseudo root stuff any longer for example. You export it just like you did with nfs3. Maybe the OP should try that. Even though we're AD here, we can still mount stuff on a 13.2 client without krb. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org