When using Kerberos keytab authentication to mount an NFSv4 share hosted on a CentOS 6.3 server, the share remains unmounted and the following error is received:<br />
mount.nfs4: access denied by server while mounting nfsserver.domain.local:/home_directories<br />
<br />
gssd produces this error:<br />
Client '<a href="mailto:root/nfsclient.domain.local@DOMAIN.LOCAL">root/nfsclient.domain.local@DOMAIN.LOCAL</a>' not found in Kerberos database while getting initial ticket for principal '<a href="mailto:root/nfsclient.domain.local@DOMAIN.LOCAL">root/nfsclient.domain.local@DOMAIN.LOCAL</a>' using keytab 'WRFILE:/etc/krb5.keytab'<br />
<br />
The KDC server is Windows Server 2008 R2 Active Directory. Ubuntu 12.04 clients mount the same share successfully. Domain user authentication and keytab-enabled LDAP queries are successful on both client and server.<br />
<br />
I've attached a document of sanitized, relevant logs and configuration files.
↧