[Samba] nfs root kerberos

[Jason Keltz]

Hi Louis,
Thanks for your message. 
However, I already have NFS working completely. I'm only trying to work out root NFS access on the client.  I tried your NFS translation fix via idmapd.conf  but that isn't working for me. I've discovered that's because CentOS 7 is using gssproxy so apparently your fix won't work. The fix from Red Hat (adding some lines to krb.conf seen in my original email) is not working either.  I'll keep working away at it.   When you're testing as root I guess you use the machine credential? That didn't work for me either. 

Jason.

On Nov. 10, 2020, 3:08 a.m., at 3:08 a.m., "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
>
>Hai, 
>
>Now, the only thing thats different here is, i do this on a member and
>on Debian
>I think if you read this :
>https://www.spinics.net/lists/samba/msg165144.html  
>
>You have the info you need in there, at least i think, it does contain
>all things you need. 
>
>If this is a samba member we are talking about. This its already
>joined.
>Add the spn to the HOSTNAME$ and let winbind refresh the keytab. 
>(all in the above link) 
>
>The link above shows mount binds for the userdirs, might not be needed
>in your setup. 
>
>
>See how far you get, questions just ask. 
>
>Greetz,
>
>Louis
>
>
>
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
>> Rowland penny via samba
>> Verzonden: maandag 9 november 2020 22:19
>> Aan: samba at lists.samba.org
>> Onderwerp: Re: [Samba] nfs root kerberos
>> 
>> On 09/11/2020 21:05, Jason Keltz via samba wrote:
>> >
>> > Seems I misunderstood again...
>> No problem, anything is hard when you start and it is very 
>> easy to make 
>> mistakes ????
>> > Yes - soon to be several hundred mounting home directories, various
>
>> > software and other stuff over NFS.  That's why I'm doing 
>> this. The NFS 
>> > part is all working perfectly actually except for root access.
>> Then we need Louis, I just use CIFS and as I said, he uses it i 
>> production and could probably set NFS up in his sleep ????
>> >
>> >> All of our users have uid > 1000. <1000 would be OS provided
>users.
>> 
>> Then I suggest you never forget your root password (I hope 
>> you are using 
>> a different one on each Unix machine) and never have problems 
>> with root, 
>> or you will have to fix things from a live CD. ????
>> 
>> Rowland
>> 
>> 
>> 
>> 
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>> 
>> 
>
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba