Isilon, Kerberos and NFS - file privileges not working

378 views
Skip to first unread message

Henrik Ravn

unread,
Feb 27, 2015, 7:16:35 AM2/27/15
to isilon-user-gr.

Hi

We are having problems with file privileges when using NFS and Kerberos. Our configuration is:

  • Isilon ver 7.1.0.3
  • Kerberos server MIT
  • Linux client

We have configured Kerberos and the authentication seems to work - the user can mount the share and read the files (permission allow all to read the files) but the users privileges are not working, no write privileges.

 

There is an issue 93663 in 7.1 and 7.2:

"93663 NFS Users who mount through NFSv4 and connect to a non-Active

Directory Kerberos server are not recognized in the form of

<user>@<realm>. Users are authenticated as nobody."

 

And maybe we are hit by this error?

 

Anybody having the above configuration working or who know how to solve the problem?

 

Thanks

Henrik

Henrik Ravn

unread,
Mar 3, 2015, 3:43:26 AM3/3/15
to isilon-user-gr.
Made a SR to EMC.

--
You received this message because you are subscribed to the Google Groups "Isilon Technical User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isilon-user-gr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Jerry Uanino

unread,
Mar 3, 2015, 9:38:44 AM3/3/15
to isilon-u...@googlegroups.com
NFSv4 + KRB, good luck.
I hope I retire before I try to cut over to NFSv4 again.  

Jason Davis

unread,
Mar 3, 2015, 10:41:56 AM3/3/15
to isilon-u...@googlegroups.com
We've had our fair share of fun with Kerberoized NFSv3. I'll say that our issues were ultimately addressed in OneFS 7.2.0.1 and so far, uNFS has been kind to us since the upgrade.

Henrik Ravn

unread,
Apr 1, 2015, 2:02:56 AM4/1/15
to isilon-user-gr.
Still same status. SR to EMC has not yet return anything useful. 
It still looks as if the Kerberos authentication is ok, mounting is also ok, except that the users is not having correct privileges to the mounted drive.

Best regards
Henrik

Reply all
Reply to author
Forward
0 new messages