how to enable NFS Kerberos authentication?

[Harald Dunkel]

Hi folks,

Maybe I am confused, but apparently I do not have to activate/modify
host-based access control in Freeipa to support Kerberos for NFS. hbac
is not mentioned on https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/htm...
Is this correct?

Would you recommend setting up weak crypto for NFS? I still have a
few Centos 5 hosts, but they are supposed to be retired in the near
future.

Freeipa is version 4.6.4, running on Centos 7.6.

Every helpful comment is highly appreciated

Harri

[Rob Crittenden]

Harald Dunkel via FreeIPA-users wrote:
> Hi folks,
>
> Maybe I am confused, but apparently I do not have to activate/modify
> host-based access control in Freeipa to support Kerberos for NFS. hbac
> is not mentioned on
> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/htm...
>
> Is this correct?

Yes, HBAC controls services accessed through PAM.
> Would you recommend setting up weak crypto for NFS? I still have a
> few Centos 5 hosts, but they are supposed to be retired in the near
> future.
>
> Freeipa is version 4.6.4, running on Centos 7.6.

Do we recommend it? No.

rob