Unix Technical Forum

NFS requires stronger authentication

This is a discussion on NFS requires stronger authentication within the Debian Linux Users forum forums, part of the Debian Linux category; --> Hi, after an update of our Sun NFS server, I get this error message in /var/log/syslog of my Etch ...


Go Back   Unix Technical Forum > Unix Operating Systems > Debian Linux > Debian Linux Users forum

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 04-03-2008, 02:43 PM
Tim Frink
 
Posts: n/a
Default NFS requires stronger authentication

Hi,

after an update of our Sun NFS server, I get this error message in
/var/log/syslog of my Etch system:

debianMachine kernel: call_verify: server SunNFS requires
stronger authentication.

Any ideas how I can set up the authentication level of my
Debian NFS client?

Regards,
Tim


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 04-03-2008, 02:43 PM
Owen Townend
 
Posts: n/a
Default Re: NFS requires stronger authentication

On 01/04/2008, Tim Frink <plfriko@yahoo.de> wrote:
>
> Hi,
>
> after an update of our Sun NFS server, I get this error message in
> /var/log/syslog of my Etch system:
>
> debianMachine kernel: call_verify: server SunNFS requires
> stronger authentication.
>
> Any ideas how I can set up the authentication level of my
> Debian NFS client?
>
> Regards,
> Tim



Hey,
I believe SunNFS now defaults to using Kerberos security instead of the
older system ip/uid/gid based authentication.
The new mount option is 'sec=' and you'll probably be needing 'sec=krb5'.
If you want to continue to use the old scheme you'll need to change the
exports on the server to explicitly 'sec=sys' or you can use 'sec=krb5:sys'
to allow both.

The newer man pages for both 'exports' and 'nfs' outline the options.

A quick google came up with this presentation which goes through the
changes from the old to new SunNFS authentication:
www.connectathon.org/talks96/auth.pdf


--
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>


Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 12:39 PM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0
www.UnixAdminTalk.com