I think you problem is FreeNAS and not IPA itself. In FreeNAS 10 they will
have built in IPA functionality.
> On Oct 8, 2016, at 5:47 PM, Arthur Morales Sampaio <amost...@gmail.com> wrote:
> Good morning, my name is Arthur and I am working on the integration of
> FreeIPA and NFSv4 mounting for home directory sharing for authenticated users.
> This is the first time I am doing this so the problem could be simple. It's
> been already a week that I have been struggling with this and I don't know
> where else to ask for help. I have read pretty much everything that is to be
> read online regarding Freeipa integration.
> Here is my scenario:
> - FreeIPA server 4.2.0 - Centos7
> - FreeNAS (NFSv4 server) 10 - FreeBSD (bundled with FreeNAS)
> - Client Ubuntu 16.04. Installed IPA client using ipa-client-install and
> imported LDAP credentials. Kerberos login is working properly I can log into
> the machines using IPA users. But can't mount NFS4 using sec=krb5 option.
> I have a functional FreeIPA server with Kerberos authentication working
> properly. But I can't get NFSv4 authenticated to work in freeipa-clients.
> Following is the error that I am getting:
> I know that this might not be enough detail for me to get help for this
> problem. But the thing is that I don't know how to enable a more verbosity
> functionality for this.
> The desired behavior would be to create mounts for home directories of users
> and enable kerberos security to mount them. Meaning that I need only the
> owners to be able to mount them.
> This is something that is very confusing for me. Wouldn't I be required to
> somehow pass to the mount command the username or any credentials of the
> kerberos user just so the NFS server would know WHO is trying to mount the
> I really exhausted my resources in trying to fix this issue.
> Does FreeIPA work with NFSv4?
> I sincerely appreciate your help on this one.
> Best regards,
> Manage your subscription for the Freeipa-users mailing list:
> Go to http://freeipa.org for more info on the project
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project