proxy/examples/gssproxy.conf.in


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

[gssproxy]

[service/nfs-server]
  mechs = krb5
  socket = /run/gssproxy.sock
  cred_store = keytab:/etc/krb5.keytab
  trusted = yes
  kernel_nfsd = yes
  euid = 0

[service/nfs-client]
  mechs = krb5
  cred_store = keytab:/etc/krb5.keytab
  cred_store = ccache:FILE:@gpstatedir@/clients/krb5cc_%U
  cred_store = client_keytab:@gpstatedir@/clients/%U.keytab
  cred_usage = initiate
  allow_any_uid = yes
  trusted = yes
  euid = 0