When running:
sudo mount -t nfs4 -o sec=krb5 sol.domain.com:/ /mnt
I get this error on the client:
mount.nfs4: access denied by server while mounting sol.domain.com:/
And on the server syslogs I read
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for nfs/ip-#-#-#-#[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for nfs/ip-#-#-#-#[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
UNKNOWN_SERVER: authtime 0, nfs/[email protected] for krbtgt/[email protected], Server not found in Kerberos database
Server keytab file:
ubuntu@sol:~$ sudo klist -e -k /etc/krb5.keytab
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
7 host/[email protected] (aes256-cts-hmac-sha1-96)
7 host/[email protected] (arcfour-hmac)
7 host/[email protected] (des3-cbc-sha1)
7 host/[email protected] (des-cbc-crc)
9 nfs/[email protected] (aes256-cts-hmac-sha1-96)
9 nfs/[email protected] (arcfour-hmac)
9 nfs/[email protected] (des3-cbc-sha1)
9 nfs/[email protected] (des-cbc-crc)
Client keytab file:
ubuntu@mercury:~$ sudo klist -e -k /etc/krb5.keytab
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
3 host/[email protected] (aes256-cts-hmac-sha1-96)
3 host/[email protected] (arcfour-hmac)
3 host/[email protected] (des3-cbc-sha1)
3 host/[email protected] (des-cbc-crc)
3 nfs/[email protected] (aes256-cts-hmac-sha1-96)
3 nfs/[email protected] (arcfour-hmac)
3 nfs/[email protected] (des3-cbc-sha1)
3 nfs/[email protected] (des-cbc-crc)
allow_weak_crypto = true
to the end.