The goal
of this
tutorial
is to gather all what need NFSV4 administrators and end-users to more
easily configure and install NFSv4 within a secure environment. This
document has been built from my own experience in testing the
installation and robustness of NFSV4 with Kerberos and also from
experiences of others who have published it on the Web. The list is
at the end of this document.
It is
certainly not
complete. Let me know at aime.le-rouzic@bull.net
what is missing and also some real-life examples of
Kerberos
NFSV4
deployments. In this document:
- we present
three commands to facilitate and controlling the setup of a linux
kerberized NFS environment to allow the reader to use quickly NFS
with Kerberos.
- we do a
quick review of how NFSV4 and Kerberos work together in order to
understand the different steps of the deployment and the impact on
the configuration.
- we
continue
by presenting all the commands, files and daemons servers used to
manage and monitor NFSV4 and Kerberos.
- we detail
the methods, scripts and tools which make the setup aand the control
of the client and server configurations step by step by:
- we
describe
more the simplified and automatic setup listed in Chapter 1.
- we analyse
and explain the common errors encountered by the administrators.
- How these appear in the logs
files.
- How to detect them.
- Which recovery
actions are necessary following
troubleshootings.
- we provide
a list of different kinds of distributions and operating systems
offering a Kerberized NFSV4 environment.
- we
consider
the current limitations of Kerberized NFSV4 infrastructures.
- we look at
future directions.
- we list
the Frequently Asked Questions.
- Finally we
give good documents related to the topic with the address where to
find them.
Evolution
If something was
uncomplete or wrong, for improvments feel
free to contact
me to
modify
this document
