[Freeipa-users] using kerberos

[Sumit Bose]

On Fri, Dec 09, 2011 at 02:15:18AM +0000, Steven Jones wrote:
> Hi
> 
> >From the HNAS manual....
> 
> 8><-----
> Kerberos Configuration
> Configuring the NAS server requires three steps: 
> 1. Create the principal and key of the service (the EVS) on the KDC (Key 
> Distribution Center). 
> 2. Export a keytab file from the KDC. We recommend using MIT Kerberos 
> version 5.
> 3.  Import the keytab file into the NAS server.
> 4. Set the Kerberos realm for the NAS server. 
> 8><-----
> 
> How is 1) and 2) performed on the IPA server?

I think you are looking for:

ipa service-add cifs/my.nas.test
ipa-getkeytab -s my.ipa.server -p cifs/my.nas.test -k /tmp/nas.keytab

I'm guessing here that you want to use cifs on the NAS box. You might
want to change this if you use other methods to access the NAS box.

HTH

bye,
Sumit

> 
> regards
> 
> Steven Jones
> 
> Technical Specialist - Linux RHCE
> 
> Victoria University, Wellington, NZ
> 
> 0064 4 463 6272
> 
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users