linux 验证nfs,linux – 使用Kerberos身份验证进行NFS共享

我使用

Windows Storage Server作为文件服务器,现在需要为

Linux客户端计算机设置NFS共享

在我的测试Ubuntu桌面上,我安装了Kerberos Client,并使用kutil命令设置了keytab

klist命令显示票证但mount命令失败

以下是相关细节：

的krb5.conf

[libdefaults]

default_realm = SUB.DOMAIN.COM

dns_lookup_realm = false

dns_lookup_kdc = false

ticket_lifetime = 24h

renew_lifetime = 7d

forwardable = true

default_tkt_enctypes = aes256-cts-hmac-sha1-96

default_tgt_enctypes = aes256-cts-hmac-sha1-96

[realms]

SUB.DOMAIN.COM = {

kdc = ad.domain.com

admin_server = ad.domain.com

}

[domain_realm]

.domain.com = SUB.DOMAIN.COM

domain.com = SUB.DOMAIN.COM

输出Klist命令：

Ticket cache: FILE:/tmp/krb5cc_2595

Default principal: user@SUB.DOMAIN.COM

Valid starting Expires Service principal

2017-07-06 12:19:05 2017-07-06 22:19:05 krbtgt/SUB.DOMAIN.COM@SUB.DOMAIN.COM

renew until 2017-07-13 12:19:01

尝试安装时出错

sudo mount -v -o sec=krb5,vers=3 fileserver:/user /home/userfolder

mount.nfs: timeout set for Thu Jul 6 12:45:01 2017

mount.nfs: trying text-based options 'sec=krb5,vers=3,addr=192.168.2.14'

mount.nfs: prog 100003, trying vers=3, prot=6

mount.nfs: trying 192.168.2.14 prog 100003 vers 3 prot TCP port 2049

mount.nfs: prog 100005, trying vers=3, prot=17

mount.nfs: trying 192.168.2.14 prog 100005 vers 3 prot UDP port 2049

mount.nfs: mount(2): Invalid argument

mount.nfs: an incorrect mount option was specified

共享设置为使用Kerberos v5进行身份验证

我错过了什么？