Three notes:


/export *(rw,sec=krb5,no_subtree_check,no_root_squash)
is better than
/export gss/krb5(rw,no_subtree_check,no_root_squash)

2. Kerberos library is still too picky about reverse DNS records - i.e. if the reverse DNS does not match the principal name in keytab, you are most likely to fail.

3. We should still mention the rpc.idmapd settings I think - people are still 
used to nfsv3 so this might be confusing to them.


On 12/07/2012 01:13 PM, Christian Horn wrote:
On Fri, Dec 07, 2012 at 01:02:01PM +0100, Petr Spacek wrote:
I accidentally found following how-to:
Did somebody try it? Did it work?
Looks good, althou I like the 'nfsroot' style of nfsv4.
My notes are at .


Freeipa-users mailing list
Freeipa-users mailing list

Reply via email to