Bug 1401429

Summary:	Configuring Kerberized NFS-Ganesha needs more details
Product:	Red Hat Gluster Storage	Reporter:	Chris Blum <cblum>
Component:	Documentation	Assignee:	Bhavana <bmohanra>
Status:	CLOSED CURRENTRELEASE	QA Contact:	surabhi <sbhaloth>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rhgs-3.1	CC:	asriram, asrivast, cblum, ndevos, rcyriac, rhs-bugs, sankarshan, sbhaloth, skoduri, storage-doc, storage-qa-internal
Target Milestone:	---
Target Release:	RHGS 3.2.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1432077 (view as bug list)		Environment:
Last Closed:	2017-03-24 10:22:54 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	1432077, 1351553

Description Chris Blum 2016-12-05 09:02:50 UTC

Document URL: 
https://access.redhat.com/documentation/en-US/Red_Hat_Storage/3.1/html/Administration_Guide/sect-NFS.html#sect-NFS_Ganesha

Section Number and Name: 
7.2.4.8. Configuring Kerberized NFS-Ganesha
Step 4: Configure the /etc/krb5.conf file and add relevant changes accordingly. For example:

Describe the issue: 
In this step all the user is given is a pre-filled configuration file for the domain "example.com" with no explanation. The direction is to "add" "relevant changes", but there is no explanation how to decide what changes are relevant and which are not.

Suggestions for improvement: 
Add comments to the example config and bold-face the mandatory changes necessary to make this file work.
Else link to the RHEL 7 / 6 user guide in which this should be explained in detail.

Additional information:

Comment 8 Soumya Koduri 2017-03-03 07:30:05 UTC

Okay to summarize, existing section needs be updated or cleaned up in below manner -

7.2.4.8. Configuring Kerberized NFS-Ganesha
<cleanup the content present here> and instead provide links mentioned below for each of KDC configurations
    7.2.4.8.1. Setting up the NFS-Ganesha Server:
          <content stays as is>
    7.2.4.8.2. Setting up the NFS Client
           <cleanup the content and instead give references to below links>


from what I gather here are the links to refer to for each of the KDC configurations available/discussed so far -

1) Using LDAP/RedHat directory server.

  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/System-Level_Authentication_Guide/index.html#authconfig-kerberos

2) Using RedHat Identity Management, 

  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#setting-up-clients

3) Using IPA server (links I got from concerned team member) -
 http://linux.web.cern.ch/linux/docs/kerberos-access.shtml
 https://fedoraproject.org/wiki/QA:Testcase_freeipa_trust_server_installation

4) Active Directory
 https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Guide/index.html

Of the above, QE has qualified only (1) i.e, using LDAP/RedHat directory server.
Request Alok to review above changes suggested and comment on what needs to be documented in the admin guide.

Comment 20 surabhi 2017-03-20 07:36:35 UTC

The changes looks good to me. Moving the BZ to verified.

Comment 21 Rejy M Cyriac 2017-03-24 10:22:54 UTC

RHGS 3.2.0 GA completed on 23 March 2017