Results 1 to 2 of 2
Greetings. This is my first post.
I wish to have user home directories mounted via NFS upon login to an SSH server. NSF4 apparently has some security features previous versions ...
- 06-02-2011 #1Just Joined!
- Join Date
- Jun 2011
- Posts
- 4
Some trouble with NFS4
Greetings. This is my first post.
I wish to have user home directories mounted via NFS upon login to an SSH server. NSF4 apparently has some security features previous versions did not have which can take advantage of Kerberos in such way that a user must supply the Kerberos password. I have NFSv4, Kerberos, and autofs setup and working fine. I am using SSH public/private key pairs for login to SSH with no passwords. Once the key pair has been validated, the user must kinit to access his home directory. This works fine also.
Now, I wish to store the public keys on the NFS server and mount the directory read only on the SSH server. My rationale is that this will make the public keys more resistant to tampering at least as far as the SSH server is concerned.
Apparently I cannot mount the filesystem using kerberos as there is no way to supply a password since this filesystem must be mounted on boot. So I just entered lines with the ip address XXX.XXX.XXX.XXX (of course with the real ip address) in /etc/exports as follows:
/exports XXX.XXX.XXX.XXX(fsid=0,ro,no_subtree_check,sync,in secure,no_root_squash)
/exports gss/krb5(fsid=0,rw,no_subtree_check,sync,insecure,root _squash)
/exports/home gss/krb5(rw,no_subtree_check,sync,insecure,nohide,sec= krb5)
/exports/authorizedkeys XX.XXX.XXX.XXX(ro,no_subtree_check,sync,insecure,n o_root_squash)
For the non-kerberos entry /exports/authorizedkeys, I can mount the file system with no trouble. However I cannot see any of the files that are in the directory. The kerberos mounts work just fine.
Any advice on what I might be doing wrong, or suggestions would be greatly appreciated.
- 06-11-2011 #2Just Joined!
- Join Date
- Jun 2011
- Posts
- 4
Nevermind. I figured it out.


Reply With Quote