Hi Team, when i am trying to setup nfs server with krb5p then it gives me error "access denied while mounting server1:/nfs"
steps that i have done:-
1:- firewall-cmd --add-port=0-65535/tcp --permanent
2: -firewall-cmd --reload
3:- yum install nfs* -y
4:- systemctl restart/enable nfs-server
5:- downlaoded the krb5.keytab in /etc
6:- systemctl restart/enable nfs-secure-server
7:- done entry in /etc/exports eg: /nfs desktop1(rw,sec=krb5p)
8:- exportfs -avf
yum install nfs*
download the krb5.keytab in /etc
systemctl restart/enable nfs-secure
mount -o sec=krb5p server1:/nfs /mnt/nfs
then it gives me error
access denied while mounting
what can be the reason
I would suggest validating the keytab. Often, I see students using the wrong option and as a result they save the "OUTPUT" of wget to the file, rather than downloading the keytab file as an output. Specifically, they confuse -o with -O, be sure to use the right one.
Anything more descriptive in one of the logs like /var/log/messages or /var/log/secure? that may direct your search further.
That doesn't change my suggestion of next steps.
I agree with Traxtopel's line of thinking. disable selinux to see if there's a context issue.
1. check if selinux is enforcing
2. if so, temporarily disable
# setenforce 0
then try again
if I do this in permissive mode. then what is the meaning of security. while doing setup of nfs with krb5p i run this command also setsebool -P nfs_export_all_rw=1