10400455-002
©2008-14 Overland Storage, Inc.
70
SnapScale/RAINcloudOS 4.1 Administrator’s Guide
4 – Network Settings
4.
If you selected
RPSEC GSS Security (Unix Kerberos)
security, complete the new options
displayed using the table below. Note the following:
•
The service will not start unless the TCP/IP domain name is set up exactly the same
as the keytab.
•
You must create the NFS and host service entries in the keytab with the fully
qualified domain name of the SnapScale cluster.
5.
Click
OK
to save the configuration.
NOTE: After enabling NFSv4 with Kerberos security, read-write host entries for
gss/krb5
,
gss/krb5i
, and
gss/krb5p
are automatically added to the NFS access entries for each
NFS-enabled share.
Option
Description
KDC Host Name
Enter the host name of the Kerberos server (for example,
“kerberos-2000.mit.edu”).
Realm Name
Enter the Kerberos realm name (For example, “ATHENA.MIT.EDU”).
NOTE: Realm names are conventionally specified in all CAPITAL
letters, but this is not required to function correctly.
Key Tab File
Click Browse to locate and upload the Kerberos key tab file (for
example, “zeus.keytab”).
This file can have any name the administrator wishes to give it. If you
do not have a keytab file for the SnapScale cluster:
• Create a host and NFS principle for the SnapScale cluster on the
KDC.
• Generate a keytab file.
• Save it to a location the client administering the SnapScale cluster
can access.
