Re: [Freeipa-users] nfs server

2012-07-01 Thread Steven Jones
except that wouldnt work for me, I had to scp the keys after creating them on the IPA server. 8>< The best way to ensure keys are properly handled is to retrieve them directly on the target machine, and only there. Simo. ___ Freeipa-users ma

Re: [Freeipa-users] nfs server

2012-07-01 Thread Steven Jones
reeipa-users@redhat.com Subject: [Freeipa-users] nfs server Hello all, Now I have an ipa server and a few ipa clients set up, I need to set up an nfs server on one of the ipa-clients. I'm following the instructions here https://docs.fedoraproject.org/en-US/Fedora/16/html/Fr

Re: [Freeipa-users] nfs server

2012-06-29 Thread Simo Sorce
On Fri, 2012-06-29 at 08:08 -0700, george he wrote: > Hello, > > > do you mean to run only this on the nfs-server? > > > > ipa-getkeytab -s my.ipaserver.edu -p nfs/my.nfsserve@myrealm.edu > -k /etc/krb5.keytab > > > Rob says to run ipa-getkeytab on each machine... So I guess I should > r

Re: [Freeipa-users] nfs server

2012-06-29 Thread george he
? Otherwise it seems to me the nfs-server won't know the new keytab in /tmp/ on the ipa-server. Thanks, George > > From: Simo Sorce >To: george he >Cc: "freeipa-users@redhat.com" >Sent: Friday, June 29, 2012 10:53 AM >Subjec

Re: [Freeipa-users] nfs server

2012-06-29 Thread Rob Crittenden
george he wrote: Hello Simo, So you mean I should run ipa-getkeytab -s my.ipaserver.edu -p nfs/my.nfsserve@myrealm.edu -k /tmp/krb5.keytab on the ipa-server, and ipa-getkeytab -s my.ipaserver.edu -p nfs/my.nfsserve@myrealm.edu-k my.ipaserver.edu:/tmp/krb5.keytab on the nfs-server? wh

Re: [Freeipa-users] nfs server

2012-06-29 Thread Simo Sorce
On Fri, 2012-06-29 at 07:45 -0700, george he wrote: > Hello Simo, > > > So you mean I should run > > > ipa-getkeytab -s my.ipaserver.edu -p nfs/my.nfsserve@myrealm.edu > -k /tmp/krb5.keytab > > > on the ipa-server, and You should run the command only once (running more than once will s

Re: [Freeipa-users] nfs server

2012-06-29 Thread george he
.keytab is the key generated on the ipa-server for nfs. Thanks, George > > From: Simo Sorce >To: george he >Cc: "freeipa-users@redhat.com" >Sent: Friday, June 29, 2012 10:24 AM >Subject: Re: [Freeipa-users] nfs server > >

Re: [Freeipa-users] nfs server

2012-06-29 Thread Simo Sorce
On Fri, 2012-06-29 at 07:18 -0700, george he wrote: > Hello all, > > > Now I have an ipa server and a few ipa clients set up, I need to set > up an nfs server on one of the ipa-clients. > I'm following the instructions here > https://docs.fedoraproject.org/en-US/Fedora/16/html/FreeIPA_Guide/Insta

[Freeipa-users] nfs server

2012-06-29 Thread george he
Hello all, Now I have an ipa server and a few ipa clients set up, I need to set up an nfs server on one of the ipa-clients. I'm following the instructions here https://docs.fedoraproject.org/en-US/Fedora/16/html/FreeIPA_Guide/Installing_the_IPA_Client_on_Linux.html where at 8.c and 8.d, it says