Re: [Freeipa-users] HBAC rules for NFS

2016-07-01 Thread Joanna Delaporte
Hi Alexander, Thanks for the link. I read through it again, and I am still stuck on the rpcgss service on the server...I don't know how to properly restart it. The service in the documents is service nfs-secure-server enable (FC16), or rpcsvcgssd.service (RH7), but I cannot enable using those. I

Re: [Freeipa-users] HBAC rules for NFS

2016-07-01 Thread Alexander Bokovoy
On Fri, 01 Jul 2016, Joanna Delaporte wrote: I am having trouble using NFSv4 via krb5 on my new IPA realm, and I am starting to wonder if I don't have HBAC rules set up correctly. I installed freeIPA with --no_hbac_allow. I have an HBAC service defined as an nfs service: $ ipa hbacsvc-add --des

[Freeipa-users] HBAC rules for NFS

2016-07-01 Thread Joanna Delaporte
I am having trouble using NFSv4 via krb5 on my new IPA realm, and I am starting to wonder if I don't have HBAC rules set up correctly. I installed freeIPA with --no_hbac_allow. I have an HBAC service defined as an nfs service: $ ipa hbacsvc-add --desc="NFS service" nfs I have an HBAC rule that a