Re: [Freeipa-users] kerberized nfsv4 client

2013-08-28 Thread natxo asenjo
On 08/28/2013 12:00 PM, Ondrej Valousek wrote: Because with NFS (v3 or v4) it is a bit more complicated. With smbclient, you are actually not "mounting" the filesystem so that the smbclient is happy with just your TGT. With NFS, you typically need two tickets: 1. one host (or nfs) so that root

Re: [Freeipa-users] kerberized nfsv4 client

2013-08-28 Thread Ondrej Valousek
o: freeipa-users@redhat.com Subject: [Freeipa-users] kerberized nfsv4 client hi, probably a stupid question but why do we need to have a host spn in the kerberos domain for the nfsv4 client to work? I do not need a host spn principal to access a cifs share on a Windows AD environment, I can

[Freeipa-users] kerberized nfsv4 client

2013-08-28 Thread natxo asenjo
hi, probably a stupid question but why do we need to have a host spn in the kerberos domain for the nfsv4 client to work? I do not need a host spn principal to access a cifs share on a Windows AD environment, I can just kinit user@AD.domain from my laptop that is not joined to the AD domain