Re: Need help with nfsv4 and krb5 access denied

2012-09-04 Thread Rick Macklem
Herbert Poeckl wrote: > On 09/03/2012 09:25 PM, Rick Macklem wrote: > > Herbert Poeckl wrote: > >> On 6/25/12 1:21 PM, Herbert Poeckl wrote: > >>> We are getting access denied error on our debian clients when > >>> mounting > >>> nfsv4 network drives with kerberos 5 authentication. > >>> > >>> What

Re: Need help with nfsv4 and krb5 access denied

2012-09-04 Thread Herbert Poeckl
On 09/03/2012 09:25 PM, Rick Macklem wrote: > Herbert Poeckl wrote: >> On 6/25/12 1:21 PM, Herbert Poeckl wrote: >>> We are getting access denied error on our debian clients when >>> mounting >>> nfsv4 network drives with kerberos 5 authentication. >>> >>> What is wired about this, is that it works

Re: Need help with nfsv4 and krb5 access denied

2012-09-03 Thread Rick Macklem
Herbert Poeckl wrote: > On 6/25/12 1:21 PM, Herbert Poeckl wrote: > > We are getting access denied error on our debian clients when > > mounting > > nfsv4 network drives with kerberos 5 authentication. > > > > What is wired about this, is that it works with one server, but not > > with > > a second

Re: Need help with nfsv4 and krb5 access denied

2012-09-03 Thread Herbert Poeckl
On 6/25/12 1:21 PM, Herbert Poeckl wrote: > We are getting access denied error on our debian clients when mounting > nfsv4 network drives with kerberos 5 authentication. > > What is wired about this, is that it works with one server, but not with > a second server. [..] For the records: The prob

Re: Need help with nfsv4 and krb5 access denied

2012-06-29 Thread Herbert Poeckl
On 06/28/2012 10:01 PM, Ian Lepore wrote: > When something in software works fine with one NIC but not another > (nearly-) identical one, the first thing that comes to my mind is that > the MAC address on the card is being used by the software as a sort of > UUID. I had that happen with a commerci

Re: Need help with nfsv4 and krb5 access denied

2012-06-28 Thread Ian Lepore
On Thu, 2012-06-28 at 16:25 +0200, Herbert Poeckl wrote: > On 06/28/2012 02:07 AM, Rick Macklem wrote: > > The NFS server will authenticate nfs/tmp2.ist.intra against the Kerberos > > KDC, using the information in the keytab entry. The whole idea behind a > > host based principal like "nfs/tmp2.ist

Re: Need help with nfsv4 and krb5 access denied

2012-06-28 Thread Herbert Poeckl
On 06/28/2012 08:37 PM, Herbert Poeckl wrote: > On 06/28/2012 05:34 PM, Rick Macklem wrote: >> The only other thought I had (I have no idea if this is even possible?) >> is that some sort of hardware offload in the network card is screwing >> things up. (I don't know the em hardware, but you might

Re: Need help with nfsv4 and krb5 access denied

2012-06-28 Thread Herbert Poeckl
On 06/28/2012 05:34 PM, Rick Macklem wrote: > The only other thought I had (I have no idea if this is even possible?) > is that some sort of hardware offload in the network card is screwing > things up. (I don't know the em hardware, but you might try disabling > TSO etc, in case the packets are so

Re: Need help with nfsv4 and krb5 access denied

2012-06-28 Thread Rick Macklem
Herbert Poeckl wrote: > On 06/28/2012 02:07 AM, Rick Macklem wrote: > > The NFS server will authenticate nfs/tmp2.ist.intra against the > > Kerberos > > KDC, using the information in the keytab entry. The whole idea > > behind a > > host based principal like "nfs/tmp2.ist.intra" is that it can only

Re: Need help with nfsv4 and krb5 access denied

2012-06-28 Thread Herbert Poeckl
On 06/28/2012 02:07 AM, Rick Macklem wrote: > The NFS server will authenticate nfs/tmp2.ist.intra against the Kerberos > KDC, using the information in the keytab entry. The whole idea behind a > host based principal like "nfs/tmp2.ist.intra" is that it can only be > used by the host "tmp2.ist.intra

Re: Need help with nfsv4 and krb5 access denied

2012-06-27 Thread Rick Macklem
Herbert Poeckl wrote: > Hallo everyone, > > > we did more testing on this topic. > > After we found a few hosts, basically HP desktop workstation with > Intel > onboard NICs, that worked and more hosts that didn't work, we placed a > second PCI based NIC into one of the hosts that worked. > >

Re: Need help with nfsv4 and krb5 access denied

2012-06-27 Thread Herbert Poeckl
Hallo everyone, we did more testing on this topic. After we found a few hosts, basically HP desktop workstation with Intel onboard NICs, that worked and more hosts that didn't work, we placed a second PCI based NIC into one of the hosts that worked. The surprising result is: With the onboard N

Re: Need help with nfsv4 and krb5 access denied

2012-06-27 Thread Herbert Poeckl
Hi Rick, thank you very much for answering. On 06/26/2012 02:17 AM, Rick Macklem wrote: > Herbert Poeckl wrote: >> Hi everybody. >> >> We are new to this list and need technical help. >> >> We are getting access denied error on our debian clients when mounting >> nfsv4 network drives with kerbero

Re: Need help with nfsv4 and krb5 access denied

2012-06-25 Thread Rick Macklem
Herbert Poeckl wrote: > Hi everybody. > > We are new to this list and need technical help. > > We are getting access denied error on our debian clients when mounting > nfsv4 network drives with kerberos 5 authentication. > > What is wired about this, is that it works with one server, but not > w

Need help with nfsv4 and krb5 access denied

2012-06-25 Thread Herbert Poeckl
Hi everybody. We are new to this list and need technical help. We are getting access denied error on our debian clients when mounting nfsv4 network drives with kerberos 5 authentication. What is wired about this, is that it works with one server, but not with a second server. The configuration o