On 2/21/19 8:07 AM, TomK wrote:
Hey All,
Wondering if there would be a cross domain issue if KRB5 is enabled on
NFS Ganesha and thereby causing an issue if the NFS Ganesha servers are
on say, domain aaa.123.xyz while the clients are on domain bbb.123.xyz?
Users get a permission denied on clients when accessing the remote mount
and while checking I see it's owned by nobody / nobody rather then their
user and group.
The client is on a different DNS domain and ownership comes through with
nobody/nobody. Hence clients get a permission denied accessing the
folder I'm thinking. However the ONLY thing different that stands out
ATM is the domains being different.
Wondering if anyone ran into a similar experience and could share their
solution? Do I need to add the realm to the /etc/krb5.conf config on
the NFS Ganesha servers perhaps?
So, I believe that the clients and servers need to be in the same KRB5
domain. This would likely be 123.xyz in your case, rather than using
the sub-domains.
Daniel