francisaugusto
Contributor
- Joined
- Nov 16, 2018
- Messages
- 153
Hi,
I have an NFSv4 share that requires kerberos security. All dirs is marked.
User `test` owns the folder to be shared, and is an ldap user.
On a remote machine, user `test` gets his kerberos tickets normally (no anomaly on the logs).
On FreeNAS, I get this on `/var/log/messages`:
Nov 8 10:47:04 freenas mountd[65442]: mount request succeeded from 10.150.30.10 for /mnt/Pool/home
But nevertheless I get this error on the client side:
test@nfsclient:/home/test$ sudo mount -t nfs4 -o sec=krb5 freenas.local:/mnt/Pool/home/ nas
mount.nfs4: access denied by server while mounting freenas.med-lo:/mnt/Pool/home/
Again on FreeNAS:
root@freenas[/mnt/Pool/]# showmount
Hosts on localhost:
nfsclient.local
root@freenas[/mnt/Pool/]# showmount -a
All mount points on localhost:
nfsclient.local:/mnt/Pool/home
So it actually shows up as mounted on the host, despite me not being them in the client!
What could be the issue here? As I said, no error on the kerberos logs - in fact, I only see a log on the first attempt, which makes me think that the client got the tickets he needed, so no log on the kdc server after that. On the FreeNAS, the mount says it was succeeded.
What could be wrong here?
I have an NFSv4 share that requires kerberos security. All dirs is marked.
User `test` owns the folder to be shared, and is an ldap user.
On a remote machine, user `test` gets his kerberos tickets normally (no anomaly on the logs).
On FreeNAS, I get this on `/var/log/messages`:
Nov 8 10:47:04 freenas mountd[65442]: mount request succeeded from 10.150.30.10 for /mnt/Pool/home
But nevertheless I get this error on the client side:
test@nfsclient:/home/test$ sudo mount -t nfs4 -o sec=krb5 freenas.local:/mnt/Pool/home/ nas
mount.nfs4: access denied by server while mounting freenas.med-lo:/mnt/Pool/home/
Again on FreeNAS:
root@freenas[/mnt/Pool/]# showmount
Hosts on localhost:
nfsclient.local
root@freenas[/mnt/Pool/]# showmount -a
All mount points on localhost:
nfsclient.local:/mnt/Pool/home
So it actually shows up as mounted on the host, despite me not being them in the client!
What could be the issue here? As I said, no error on the kerberos logs - in fact, I only see a log on the first attempt, which makes me think that the client got the tickets he needed, so no log on the kdc server after that. On the FreeNAS, the mount says it was succeeded.
What could be wrong here?
Last edited:
