Ok,
Simo, I pushed the two patches after testing a little. Thanks Anthony for testing as well!
Attached, a followup patch, that would also mention servicename, euid and socketname when debug is enabled.
Thanks, Guenther
On 19/06/13 18:48, Anthony Messina wrote:
On Wednesday, June 19, 2013 11:48:14 AM Simo Sorce wrote:
This just changes the configuration file.
I think this is the best way as we do realy want to be able to have completely different options for the client and the serve anyways.
Simo.
I can confirm that the following works on a F19 NFS client, so long as GSSPROXY_SOCKET is either
- not defined in /etc/sysconfig/nfs, or
- set to the default of /var/lib/gssproxy/default.sock
using:
nfs-utils-1.2.8-2.0.fc19.x86_64 gssproxy-0.2.3-5.fc19.x86_64
with contents of /etc/gssproxy/gssproxy.conf:
[gssproxy]
[service/nfs-server] mechs = krb5 socket = /run/gssproxy.sock cred_store = keytab:/etc/krb5.keytab trusted = yes kernel_nfsd = yes euid = 0
[service/nfs-client] mechs = krb5 cred_store = keytab:/etc/krb5.keytab cred_store = ccache:FILE:/var/lib/gssproxy/clients/krb5cc_%U cred_store = client_keytab:/var/lib/gssproxy/clients/%U.keytab trusted = yes euid = 0
-A
gss-proxy mailing list gss-proxy@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/gss-proxy