change domain for idmapd

francisaugusto

Contributor
Joined
Nov 16, 2018
Messages
153
Hi,

I've joined my FreeNAS to FreeIPA, and user authentication works like a charm.
I want to share some folders via NFSv4. Kerberos is in place, and I'm not getting any errors on that side, but still get access denied when trying to mount.

I strongly suspect this is an idmapd config issue. On ubuntu and Fedora, I need to add the domain of my FreeIPA on `/etc/idmapd.conf` (the domain of my FreeIPA and the realm are different than that of my freenas), and then it works there, but I see no `/etc/idmapd.conf` on FreeNas, nor the GUI allow me to change that. Under the "edit idmap" on my LDAP configurations there's no option for the Domain.

Any hints on how to change this?
 
Top