On Sun, Feb 14, 2021 at 12:23:05AM -0700, Jackman via Dng wrote:
> Has anyone successfully gotten NFS and Kerberos working together on
> Beowulf? I was able to get a working setup going in a fresh Debian Buster
> VM in about 10 minutes. On the other hand, I've been working on trying to
> get it working on Beowulf for two days without success.

I'm currently using samba4 active directory based kerberos with NFS4
(and windows shares) and prior to that i also used MIT kerberos
successfully without any issue.

On the NFS4 server:

cat /etc/exports

/srv/nfs4             *(rw,async,root_squash,crossmnt,fsid=0,sec=krb5i,no_subtree_check)
/srv/nfs4/Benutzer    *(rw,async,sec=krb5i,no_subtree_check)
.....

cat /etc/default/nfs-common
NEED_STATD=no
STATDOPTS=
NEED_IDMAPD=yes
NEED_GSSD=yes

Could you double check, that the kerberos keytabs for the services are
properly configured. You might also check that dns is working properly.

> ➜ ~ mount -t nfs4 storage0:/srv/nfs-test /mnt/test -v

You need to specify "-o sec=krb5i" when mounting (at least I do that
here). I also use the fqdn of the server.


--
gnuPG keyid: 8C2BAF51
fingerprint: 28EE 8438 E688 D992 3661 C753 90B3 BAAA 8C2B AF51