I've setup NFSv4 using Kerberos (works great), but now I need to add NFSv3 with Kerberos. When trying to mount the NFSv3 export, I get a permission needed error on the client and on the server the error is "unmatched host".
In /etc/export I just have: /test gss/krb5(rw,sync)
The "unmatched host" error usually means that you haven't specified that the client can access the server in the export file. But with kerberos you shouldn't need to. The export man file states:
RPCSEC_GSS security To restrict access to an export using rpcsec_gss security, use the special string "gss/krb5" as the client. It is not possible to simultaneously require rpcsec_gss and to make requirements on the IP address of the client.
I'm pretty sure Kerberos is setup correctly (again NFSv4 with kerberos works) and from what I've read on the web, I think the NFS server is setup correctly (settings are below) and the necessary services are running. I currently testing on Ubuntu 10.4, but had the same problem on Novell SLED 10.3.
Anyone have an idea what I could be doing wrong? or can point me to a NFSv3 w/kerberos how-to?
nss-common: NEED_STATD=yes STATDOPTS= NEED_IDMAPD=no NEED_GSSD=yes nss-kernel-srever: RPCNFSDCOUNT="8 --no-nfs-version 4 --no-nfs-version 2" RPCNFSDPRIORITY=0 RPCMOUNTDOPTS="--manage-gids" NEED_SVCGSSD=yes RPCSVCGSSDOPTS=" -vvv "