Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Feb 2013 17:18:53 +0100
From:      "Momchil Ivanov" <momchil@xaxo.eu>
To:        "Rick Macklem" <rmacklem@uoguelph.ca>
Cc:        freebsd-fs@freebsd.org
Subject:   Re: NFS + Kerberos
Message-ID:  <d112e84c5a294f5e009e8eac4eb0cf19.squirrel@webmail.xaxo.eu>

next in thread | raw e-mail | index | archive | help
On Thu, February 21, 2013 12:10 am, Rick Macklem wrote:
> I would have thought kerberos was rebuilt for make buildworld. If you
use heimdal from somewhere else (ports or their distro), I don't think
that needs to be rebuilt, since I don't think the ..pname_to_uid()
function is a part of a generic heimdal distribution, but I am not sure.
>
> Be sure to change buf[128] --> buf[1024] in both:
> kerberos5/lib/libgssapi_krb5/pname_to_uid.c
> usr.sbin/gssd/gssd.c
>
> (Or paths close to that. I might not have remembered them quite
> correctly;-)

this change allows for yet another entry in the kdc log:

2013-02-21T17:03:43 TGS-REQ user@EXAMPLE.LOCAL from IPv4:X.X.X.X for
nfs/srv.example.local@EXAMPLE.LOCAL
2013-02-21T17:03:44 TGS-REQ authtime: 2013-02-21T17:02:03 starttime:
2013-02-21T17:03:43 endtime: 2013-02-22T03:02:00 renew till: unset
2013-02-21T17:03:44 sending 612 bytes to IPv4:X.X.X.X

which seems promising, but I still get:

$ mount -t nfs -o nfsv4,sec=krb5i srv.example.local:/ /mnt/srv
  mount_nfs: can't update /var/db/mounttab for srv.example.local:/ nfsv4
err=10016
  mount_nfs: /mnt/srv, : Input/output error

do you happen to have any other ideas?

Thank you,
Momchil






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d112e84c5a294f5e009e8eac4eb0cf19.squirrel>