Search found 27 matches

by xq10907
2018/05/18 12:41:56
Forum: CentOS 7 - General Support
Topic: Can i change SPN while mounting nfsv4 export
Replies: 0
Views: 125

Can i change SPN while mounting nfsv4 export

Hi guys, i have a centos(ark-centos7-ker.qa.arkivio.com) to mount netapp nfsv4 export, sudo mount -t nfs -o v4.0,sec=krb5 qavs3-qacl6.qa.arkivio.com:/vol2/vol2nfs1 /nfs4-mnt-dir the login user is domain user qa1@qa.arkivio.com from below netapp nfsv4 server log centos using SPN with machine account(...
by xq10907
2018/05/09 01:55:58
Forum: CentOS 7 - General Support
Topic: Centos doesn't use strongest Kerberos encryption type
Replies: 5
Views: 302

Re: Centos doesn't use strongest Kerberos encryption type

Is the same KVNO on the KDC? You should 'kinit admin' && 'kvno nfs/ark-centos-smb4.qa.arkivio.com@QA.ARKIVIO.COM' on the kdc server. KDC is windows2016 domain controller,i cannot find ways to check kvno for now Also you can increase debugging by passing '-v' to some of the daemons configuration in ...
by xq10907
2018/05/08 01:33:02
Forum: CentOS 7 - General Support
Topic: Centos doesn't use strongest Kerberos encryption type
Replies: 5
Views: 302

Re: Centos doesn't use strongest Kerberos encryption type

Hi hunter86_bg, below is my result they looks good to me, I know it's complicated... [root@ark-centos-smb4 ~]# systemctl status nfs-secure.service ● rpc-gssd.service - RPC security service for NFS client and server Loaded: loaded (/usr/lib/systemd/system/rpc-gssd.service; static; vendor preset: disa...
by xq10907
2018/05/07 09:27:23
Forum: CentOS 7 - General Support
Topic: Centos doesn't use strongest Kerberos encryption type
Replies: 5
Views: 302

Centos doesn't use strongest Kerberos encryption type

Hi bothering you guys again I want to mount a netapp nfsv4 export from centos7 client with below command with no luck [qa4@ark-centos-smb4 ~]$ sudo mount -t nfs -o v4.0,sec=krb5 qavs2-qacl6.qa.arkivio.com:/vol2/vol2nfs1 /nfs4-mnt-dir [sudo] password for qa4: mount.nfs: access denied by server while ...
by xq10907
2018/04/13 09:24:56
Forum: CentOS 7 - General Support
Topic: nfsv4 username format issue
Replies: 2
Views: 258

Re: nfsv4 username format issue

Thanks MAGIC hunter86_bg!!

After setting

Code: Select all

use_fully_qualified_names = False
in my nfs4 server sssd.conf,nobody ownership disappeared which has blocked me several days...
i can not find other word to express my appreciation
by xq10907
2018/04/10 09:20:59
Forum: CentOS 7 - General Support
Topic: nfsv4 username format issue
Replies: 2
Views: 258

nfsv4 username format issue

Hi centoers, i configured a nfsv4 server on centos7.4,then mount its nfs4 dir from a ubuntu16,create some files on mounted dir their owner showed as nobody there is redundant domain name in username format via /var/log/messages see below Apr 10 01:39:38 ark-centos7-ker rpc.idmapd[659]: Server : (use...
by xq10907
2018/03/02 09:28:03
Forum: CentOS 7 - General Support
Topic: nfs4_setfacl reports error on files of mounted folder
Replies: 0
Views: 322

nfs4_setfacl reports error on files of mounted folder

Hey guys, sorry to bother you again I mount a nfsv4 folder via command sudo mount -t nfs -o v4.0,sec=krb5 ark-centos7-ker.qa.arkivio.com:/export/nfs1 /nfs4-mnt-dir create a file via: touch 11,then set file's acl get failed with command [auto-stor@qa.arkivio.com@ark-centos-smb4 ~]$ sudo nfs4_setfacl ...
by xq10907
2017/11/28 01:45:55
Forum: CentOS 7 - General Support
Topic: get access denied on samba AD shares
Replies: 1
Views: 931

Re: get access denied on samba AD shares

After updating sssd* packages to 1.15.2-50.el7_4.6,restart smb service,i could access samba AD shares,it caused by sssd authentication broken with AD
by xq10907
2017/09/21 09:25:40
Forum: CentOS 7 - General Support
Topic: get access denied on samba AD shares
Replies: 1
Views: 931

get access denied on samba AD shares

Hello Sambaers, i can not access my samba shares after upgrade my centos to 7.4,samba version was upgraded to 4.6.2 i joined centos to windows domain by realm command,domain user(format as username@doaminname) could login to centos could get kerberos ticket by kinit with domain user execute net view...
by xq10907
2017/08/31 05:37:01
Forum: CentOS 7 - General Support
Topic: Cannot mount nfsv4 exports
Replies: 10
Views: 1421

Re: Cannot mount nfsv4 exports

hunter86_bg wrote:Have you modified the AD?
no I didn't touch it,run setspn -L -C ark-centos-smb4 at the command prompt could see corresponding nfs/* Kerberos principals