I am running a NFSv4 server and a client on two raspbian buster distributions. I use Kerberos to secure the NFS share.
On the NFS client, I run the gitea service with git user, which is started on boot. I would like to store the git repositories on the NFS share, so the git user will need to access it.
When I login to git user and execute
kinit I can access the share without issue.
Is there a way that the gitea service automatically ask a Kerberos ticket and renew it so the service can access the NFS share without my intervention ?
I did some research, I have some ideas in mind but not sure what's the best way to achieve it.
- I could run a cron that regularly run a
- This thread talks about SSSD (which I didn't know about)
- I could manually do an initial
kinitand set a very long ticket lifetime but it is not a good practice in a security point of view.
(I am new to Kerberos and NFS so they may be poorly configured but it works)