How hard it is to configure Kerberos and nfs4?

[Chan Chung Hang Christopher]

Peng Yu wrote:
> On Wed, Jul 28, 2010 at 7:29 AM, Chan Chung Hang Christopher
> <christopher.chan at bradbury.edu.hk> wrote:
>> Peng Yu wrote:
>>> Hi,
>>>
>>> I need to have nfs4 installed. I think that Kerberos is required to be
>>> installed. I heard that Kerberos was hard to install. But I'm not sure
>>> if it is hard to configure now. Could anybody that have any experience
>>> on Kerberos and nfs4 comment on it?
>>>
>> Kerberos is easy. Just use AD :-P.
> 
> What is AD?

Active Directory. /me scurries back into his hole.

> 
>> Getting NFS to use Kerberos is what is hard and all the other stuff you
> 
> Do you mean NFS by nfs4 only or nfs in general (all versions)? Do you
> know why it is hard? Is getting nfs3 working with kerboros much easier
> than getting nfs4 working with kerboros?

NFS4. NFS3 does not support kerberos. Matching up ids, system time, 
setting up host principals and then try to figure out why sec=krb5 won't 
work...dunno

> 
>> need to do to ensure a single user database for all systems.
>