Secure NFS on HP-UX 11i v3

2
Table of Figures
Figure 1 Initial krbsetup(1m) Screen ......................................................................................... 4
Figure 2 Select type of backend data store
............................................................................... 5
Figure 3 Complete the Kerberos Server Configuration
................................................................ 5
Figure 4 /etc/krb5.conf Contents
........................................................................................... 6
Figure 5 Adding NFS Service Credentials via kadminl(1M)
........................................................ 7
Figure 6 Adding User Credentials via kadminl(1M)
................................................................... 8
Figure 7 Adding Credentials for Serviceguard NFS Toolkit Package
............................................ 8
Figure 8 kadminl_ui(1M)
........................................................................................................ 8
Figure 9 Copy /etc/krb5.conf to NFS Clients and Servers
.......................................................... 9
Figure 10 Uncomment /etc/nfssec.conf Kerberos Entries on NFS Clients and Servers
..................... 9
Figure 11 Initialize gsscred(1M) Database on NFS Clients and Servers
...................................... 10
Figure 12 Uncomment gssd entry and re-initialize inetd on NFS Clients and Servers
..................... 10
Figure 13 Test Kerberos Credentials via kinit(1)
...................................................................... 11
Figure 14 Extract Kerberos Keys to keytab File
........................................................................ 12
Figure 15 klist(1) Displaying /etc/krb5.keytab File
.................................................................. 13
Figure 16 Manual mount(1M) of Secure NFS Filesystem
........................................................... 15
Figure 17 Configuring Secure NFS via /etc/fstab
................................................................... 16
Figure 18 Mounting Secure NFS Filesystem from Serviceguard NFS Toolkit
................................. 18
Table of Tables
Table 1 Supported Secure NFS Security Flavors ...................................................................... 13
Secure NFS Test Environment used in this Paper
Throughout this paper I will be using a number of test systems to illustrate how to install and configure
Secure NFS on HP-UX 11i v3. The following systems will be used:
Hostname Model Role
atcux10.rose.hp.com
rx1620 NFS Client
atcux12.rose.hp.com
rx7620 NFS Server Node 1
atcux13.rose.hp.com
rp7420 NFS Server Node 2
atcuxvm3.rose.hp.com
HP Integrity VM Kerberos Server
nfs-pkg1.rose.hp.com
Virtual IP used by Serviceguard Highly Available NFS Server