Bug 1120785

Summary:	Investigate Kerberized NFS4 setup with the new NFS plugin
Product:	Red Hat Enterprise Linux 7	Reporter:	Dmitri Pal <dpal>
Component:	sssd	Assignee:	Roland Mainz <rmainz>
Status:	CLOSED UPSTREAM	QA Contact:	Kaushik Banerjee <kbanerje>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.0	CC:	dpal, grajaiya, jgalipea, jhrozek, lslebodn, mkosek, pbrezina, preichl, rharwood, rmainz
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-11-25 13:05:53 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Dmitri Pal 2014-07-17 16:48:55 UTC

This bug is created as a clone of upstream ticket:
https://fedorahosted.org/sssd/ticket/2376

There is a new NFS plugin on the list, pending review. At the same time, some users on freeipa-users list have been complaining about difficulties getting NFS server working with IPA-AD trusts.

At the very least, completing this ticket would make for a nice HOWTO or a blog post.

Comment 1 Jakub Hrozek 2014-07-18 06:33:43 UTC

To test the plugin, create an idmap configuration such as:

---------------------
[General]
Verbosity = 0            # change to a higher value to debug
Domain = ipa.example.com # change to your sssd domain accordingly

[Mapping]
Nobody-User = nfsnobody
Nobody-Group = nfsnobody

[Translation]
Method = sss_nfs

[Static]
------------------------

Comment 2 Jakub Hrozek 2014-11-13 15:06:22 UTC

Giving to Roland, since he was the one who did the sssd upstream review and testing of the NFS plugin.

Comment 3 Jakub Hrozek 2014-11-25 13:05:53 UTC

The result of this work will be an upstream wiki page, we don't need to keep a RHEL tracker around.