From 352b9c0f3d3d933a0d1f52627ad30447c288de5c Mon Sep 17 00:00:00 2001 From: "W. Trevor King" Date: Sun, 27 Nov 2011 22:07:17 -0500 Subject: [PATCH] Mention RPCSEC_GSS_KRB5 in Kerberos post. --- posts/Kerberos.mdwn | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/posts/Kerberos.mdwn b/posts/Kerberos.mdwn index a06f294..a8d4dc7 100644 --- a/posts/Kerberos.mdwn +++ b/posts/Kerberos.mdwn @@ -230,6 +230,12 @@ Add it to your default runlevel with: Setup the NFS client -------------------- +In order to use private (`sec=krb5p`) mounts, you'll need to enable +[RPCSEC_GSS_KRB5][]. Without it, [you'll get error +messages][gss_error] such as + + gss_create: Pseudoflavor 390005 not found! + You'll also need `nfs-utils` here # USE="kerberos" emerge -av nfs-utils @@ -323,6 +329,8 @@ user access to the NFS-mounted music as the `nobody` principal. [acl]: http://web.mit.edu/kerberos/krb5-1.9/krb5-1.9.1/doc/krb5-install.html#Add%20Administrators%20to%20the%20Acl%20File [principal]: http://web.mit.edu/kerberos/krb5-1.9/krb5-1.9.1/doc/krb5-admin.html#Adding%20or%20Modifying%20Principals [keytab]: http://web.mit.edu/kerberos/krb5-1.9/krb5-1.9.1/doc/krb5-install.html#Create%20a%20kadmind%20Keytab%20%28optional%29 +[RPCSEC_GSS_KRB5]: http://www.kernel.org/doc/menuconfig/net-sunrpc-Kconfig.html +[gss_error]: http://osdir.com/ml/linux.nfsv4/2006-01/msg00014.html [nfs-tut1]: http://wiki.linux-nfs.org/wiki/index.php/Enduser_doc_kerberos [nfs-tut2]: http://bernard.nexusinternational.jp/2008/03/nfs-and-kerberos-bernie-howto.html [nfs-tut3]: http://www.techrepublic.com/blog/opensource/kerberos-authentication-with-nfsv4/1965 -- 2.26.2