[Freeipa-users] bit OT: trouble getting nfsv4 with kerberos with ipa and opensolaris
Sigbjorn Lie
sigbjorn at nixtra.com
Sat Apr 13 11:55:29 UTC 2013
No that syntax is correct.
# zfs create p00/test
# zfs set sharenfs='sec=krb5' p00/test
No errors on my system. But have you remembered to enable krb5 in
/etc/nfssec.conf? It is not enabled by default.
You may read this thread I wrote a while back for how to make
NexentaStor work with FreeIPA. It will be the same setup for openindiana:
https://www.redhat.com/archives/freeipa-users/2011-July/msg00033.html
Rgds,
Siggi
On 04/13/2013 01:16 PM, Natxo Asenjo wrote:
> # zfs set sharenfs='sec=krb5' rpool/export/home
> cannot set property for 'rpool/export/home': 'sharenfs' cannot be set
> to invalid options
>
> I am starting to think this is a bug in illumos,
>
>
> Thanks anyway!
>
> --
> Groeten,
> natxo
>
>
> On Fri, Apr 12, 2013 at 11:57 PM, Sigbjorn Lie <sigbjorn at nixtra.com
> <mailto:sigbjorn at nixtra.com>> wrote:
>
> zfs set sharenfs='sec=krb5' pool/dataset
>
>
> Natxo Asenjo <natxo.asenjo at gmail.com
> <mailto:natxo.asenjo at gmail.com>> wrote:
>
> hi,
>
> thanks, still not working though:
>
> # share -F nfs -o "sec=krb5" -d "homedirs" /export/home
> Could not share: /export/home: invalid security type
>
> # zfs set sharenfs="sec"="krb5" rpool/export/home
> cannot set property for 'rpool/export/home': 'sharenfs' cannot
> be set to invalid options
>
> # zfs set "sharenfs"="sec"="krb5" rpool/export/home
> cannot set property for 'rpool/export/home': 'sharenfs' cannot
> be set to invalid options
>
> # zfs set sharenfs=sec="krb5" rpool/export/home
> cannot set property for 'rpool/export/home': 'sharenfs' cannot
> be set to invalid options
>
> # zfs set sharenfs=sec=krb5 rpool/export/home
> cannot set property for 'rpool/export/home': 'sharenfs' cannot
> be set to invalid options
>
> # zfs set "sharenfs=sec=krb5" rpool/export/home
> cannot set property for 'rpool/export/home': 'sharenfs' cannot
> be set to invalid options
>
>
> --
> Groeten,
> natxo
>
>
> On Fri, Apr 12, 2013 at 11:30 PM, Sigbjorn Lie
> <sigbjorn at nixtra.com <mailto:sigbjorn at nixtra.com>> wrote:
>
> Your syntax seem correct but you need to quote the value.
>
>
>
> --
> Sent from my Android phone with K-9 Mail. Please excuse my brevity.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130413/5c2bede4/attachment.htm>
More information about the Freeipa-users
mailing list