Kerberized NFS

Client Configuration

• in /etc/idmap.conf, add

  Local-Realms = CLASSE.CORNELL.EDU, LNS.CORNELL.EDU

• SL6: in /etc/sysconfig/nfs, add

  SECURE_NFS="yes" 
  RPCSVCGSSDARGS="-n" 

• SL7:
• Join the client to CLASSE AD.
• enable and start rpc.gssd (rpcgssd service on SL6, rpc-gssd service on SL7)

Usage

• mount -o sec=krb5 chessraw:/mnt/raw /mnt/raw