[30931] in Kerberos

home help back first fref pref prev next nref lref last post

clustered NFS - kerberos - mount failure

daemon@ATHENA.MIT.EDU (Chinmay P Soman)
Thu Mar 26 03:00:21 2009

To: kerberos@mit.edu
MIME-Version: 1.0
Message-ID: <OF203D58C1.1BFFCA01-ON65257585.0025C8FE-65257585.002661C0@in.ibm.com>
From: Chinmay P Soman <chinmay.soman@in.ibm.com>
Date: Thu, 26 Mar 2009 12:29:15 +0530
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi,

I am trying to configure a NFS server with kerberos support. The catch is, 
the NFS server is part of a cluster.  Therefore, all the client mounts are 
done using the 
cluster name and not the server name.

For eg:    Let  cluster name =  Mycluster.domain.com     ,  server = 
server1.domain.com

-----------------------

In this case, when my NFS client mounts as :
mount -o vers=3,sec=krb5 server1.domain.com:/tmp_share /mnt     =>  This 
passes

However,
mount -o vers=3,sec=krb5 Mycluster.domain.com:/tmp_share /mnt     =>  This 
fails.


I am guessing the gssd daemon on the server side is creating a context for 
its localhost, which is => server1.domain.com

However, the request is meant for Mycluster.domain.com.  Hence, it fails 
due to the mismatch.


Please clarify if my reasoning is correct. If yes, also please let me know 
a possible solution




Thanks and regards

Chinmay P Soman
ctdb/panache research activities, SoNAS
IBM India Systems & Technology Lab
Ozone-2, Saswad Road, Pune.
Tel : 91-020-26901666
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post