(no commit message)

[devwiki.git] / testing / nfsv4.mdwn

diff --git a/testing/nfsv4.mdwn b/testing/nfsv4.mdwn
index 97ef6d0..a343377 100644 (file)
--- a/testing/nfsv4.mdwn
+++ b/testing/nfsv4.mdwn
@@ -2,7 +2,9 @@
 
 The steps below have been tested on Debian Squeeze using MIT 1.10 (from testing), as described in the [[Debian guide|configuringdebian]].
 
-## Install NFSv4 using standard Kerberos authentication
+## Install NFSv4 client/server and export a directory using standard Kerberos authentication
+Make sure you can mount the filesystem with something like:
+
     # mount -t nfs4 -o sec=krb5 moonshot.ics.muni.cz:/ /mnt
 
 ## Remove the dependency on libgssglue
@@ -12,8 +14,39 @@ The steps below have been tested on Debian Squeeze using MIT 1.10 (from testing)
     $ debuild -us -uc
     # dpkg -i ../librpcsecgss*deb
 
+The librpcsecgss.patch mentioned above is [[here|librpcsecgss.patch]]
+
+
 ## Install kernel that supports strong encryption (i.e. >= 2.6.35)
     # apt-get install -t testing linux-image-amd64
     # reboot
 
+## Build nfs-utils
+    $ git clone /afs/ics.muni.cz/home/kouril/nfs-utils
+    $ cd nfs-utils
+    $ git checkout moonshot
+    $ ./autogen.sh
+    $ ./configure GSSGLUE_CFLAGS=-I. GSSGLUE_LIBS=-lgssapi_krb5
+    $ make
+    # utils/gssd/gssd -n
+    # utils/gssd/svcgssd -n
+
+## Configure identity mapping
+Edit /etc/idmapd.conf specifying:
+
+    Domain = ics.muni.cz
+    ....
+
+    [Translation]
+    Method = static
+    
+    [Static]
+    kouril@ics.muni.cz = kouril
+
+Restart the idmapd
+
+## Mount the exported directory:
+Standard mount and other tools should be enough to
+
+    # mount -t nfs4 -o sec=krb5 moonshot.ics.muni.cz:/ /mnt