<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Wow, that's fairly horrifying stuff, Rob. All of my NFS servers (and current ldap-auth'd clients, which are not migrated to ipa-client) are constrained to nfs3. I have no plans to v4 any of my nfs infrastructure apart from one server eventually which will serve mostly Macs for acl richness. At any rate: "To use GSS-Proxy with the NFS server you need a recent enough kernel. Anything more recent than 3.10 should work just fine."Servers are CentOS6 and Nexenta where they'll remain for the foreseeable future.Surely this is anticipated somewhere in the ipa/sssd universe allowing autofs to act in some autonomous way as it does currently with ldap backend?thank you,- cal sawyer</div><div> Date: Mon, 4 Jan 2016 14:07:40 -0500</div><blockquote type="cite"><div>From: Rob Crittenden <<a href="mailto:rcritten@redhat.com">rcritten@redhat.com</a>> To: Cal Sawyer <<a href="mailto:cal-s@blue-bolt.com">cal-s@blue-bolt.com</a>>, <a href="mailto:freeipa-users@redhat.com">freeipa-users@redhat.com</a> Subject: Re: [Freeipa-users] IPA, autofs, kerberos Message-ID: <<a href="mailto:568AC2FC.6080807@redhat.com">568AC2FC.6080807@redhat.com</a>> Content-Type: text/plain; charset=ISO-8859-1 Cal Sawyer wrote: <blockquote type="cite">Hi </blockquote><blockquote type="cite"> </blockquote><blockquote type="cite">After getting autofs working using automountmaps in IPA, i've discovered </blockquote><blockquote type="cite">that upon rebooting a client i have no automounts. If i ssh into the </blockquote><blockquote type="cite">client and obtain a ticket as admin, after restarting autofs (as root), </blockquote><blockquote type="cite">I can once again see access automounted directories. Until then, user </blockquote><blockquote type="cite">logins which depend on network home mount consistently fail </blockquote><blockquote type="cite"> </blockquote><blockquote type="cite">Question is, how can this be made automatic on reboot? </blockquote> Credentials are needed to do the mounts so it depends on what credentials you want/need to use for that. What mounts are these that require Kerberos, home directories or something else? GSS-Proxy can do this unattended, <a href="https://fedorahosted.org/gss-proxy/wiki/NFS">https://fedorahosted.org/gss-proxy/wiki/NFS</a> rob </div></blockquote></body></html>