使用Kerberos身份validation的NFS共享

我正在使用Windows Storage Server作为文件服务器,现在需要为Linux客户机设置NFS共享

在我的Ubuntu桌面testing中,我安装了Kerberos Client,并使用kutil命令设置了keytab

klist命令显示故障单,但是mount命令失败

这里是相关的细节: krb5.conf

[libdefaults] default_realm = SUB.DOMAIN.COM dns_lookup_realm = false dns_lookup_kdc = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true default_tkt_enctypes = aes256-cts-hmac-sha1-96 default_tgt_enctypes = aes256-cts-hmac-sha1-96 [realms] SUB.DOMAIN.COM = { kdc = ad.domain.com admin_server = ad.domain.com } [domain_realm] .domain.com = SUB.DOMAIN.COM domain.com = SUB.DOMAIN.COM 

Klist命令的输出:

 Ticket cache: FILE:/tmp/krb5cc_2595 Default principal: [email protected] Valid starting Expires Service principal 2017-07-06 12:19:05 2017-07-06 22:19:05 krbtgt/[email protected] renew until 2017-07-13 12:19:01 

尝试装载时出错

 sudo mount -v -o sec=krb5,vers=3 fileserver:/user /home/userfolder mount.nfs: timeout set for Thu Jul 6 12:45:01 2017 mount.nfs: trying text-based options 'sec=krb5,vers=3,addr=192.168.2.14' mount.nfs: prog 100003, trying vers=3, prot=6 mount.nfs: trying 192.168.2.14 prog 100003 vers 3 prot TCP port 2049 mount.nfs: prog 100005, trying vers=3, prot=17 mount.nfs: trying 192.168.2.14 prog 100005 vers 3 prot UDP port 2049 mount.nfs: mount(2): Invalid argument mount.nfs: an incorrect mount option was specified 

共享被设置为使用Kerberos v5进行身份validation

我错过了什么?

Windows Sever有可怕的NFS服务器堆栈:性能不是很好,pipe理最好是笨拙的。 你可以做什么:启用Hyper-Vangular色,并在里面生成一个带有“普通”NFS服务器的FreeBSD或者Linux虚拟机。