NFS (with Kerberos) mount failing due to "Server not found in Kerberos database" error

Posted by Kendall Hopkins on Server Fault See other posts from Server Fault or by Kendall Hopkins
Published on 2012-04-04T18:13:56Z Indexed on 2012/04/08 11:33 UTC
Read the original article Hit count: 1076

Filed under:
|
|
|

When running:

`sudo mount -t nfs4 -o sec=krb5 sol.domain.com:/ /mnt`

I get this error on the client:

mount.nfs4: access denied by server while mounting sol.domain.com:/

And on the server syslogs

UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for nfs/ip-#-#-#-#[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for nfs/ip-#-#-#-#[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0,  nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database

Server keytab file:

ubuntu@sol:~$ sudo klist -e -k /etc/krb5.keytab
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
   7 host/[email protected] (aes256-cts-hmac-sha1-96) 
   7 host/[email protected] (arcfour-hmac) 
   7 host/[email protected] (des3-cbc-sha1) 
   7 host/[email protected] (des-cbc-crc) 
   9 nfs/[email protected] (aes256-cts-hmac-sha1-96) 
   9 nfs/[email protected] (arcfour-hmac) 
   9 nfs/[email protected] (des3-cbc-sha1) 
   9 nfs/[email protected] (des-cbc-crc)

Client keytab file:

ubuntu@mercury:~$ sudo klist -e -k /etc/krb5.keytab
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
   3 host/[email protected] (aes256-cts-hmac-sha1-96) 
   3 host/[email protected] (arcfour-hmac) 
   3 host/[email protected] (des3-cbc-sha1) 
   3 host/[email protected] (des-cbc-crc) 
   3 nfs/[email protected] (aes256-cts-hmac-sha1-96) 
   3 nfs/[email protected] (arcfour-hmac) 
   3 nfs/[email protected] (des3-cbc-sha1) 
   3 nfs/[email protected] (des-cbc-crc) 

© Server Fault or respective owner

Related posts about amazon-ec2

Related posts about nfs