How to get persistent (permanent) smb mount using kerberos authentication on RHEL7?
Clash Royale CLAN TAG#URR8PPP
up vote
2
down vote
favorite
Environment: I have joined a few of my RHEL 7.3 boxes with MS AD domain using realmd/sssd. I have allowed only members of a few allowed groups can login to the box. Credentials caching is disabled. All works well without any problem.
What I need to achieve next: I want one Windows SMB share to be permanently mounted to the Linux (in the fstab or else) using Kerberos(passwordless).
What I have achieved so far: I am able to mount the Windows SMB path, but it expires when the manually generated TGT ticket expires.
How I’m doing it: I generate TGT ticket using ‘kinit’
then TGT ticket for cifs mount using kvnp
Then making an entry in the fstab with ‘sec=krb5’ and providing the uid of the desired service account.
Using the above the SMB share is mounted successfully but expires in 9 hours upon expiration of the TGT ticket.
Please suggest if there is something that I can do to make the mount permanent.
Note: I'm not modifying the TGT ticket expiration time thinking it may cause some security or compliance concerns.(please, correct me if I'm wrong).
linux rhel kerberos smb
asked Jan 15 at 11:01
Rajneesh Gadge
638
add a comment |Â
up vote
2
down vote
favorite
Environment: I have joined a few of my RHEL 7.3 boxes with MS AD domain using realmd/sssd. I have allowed only members of a few allowed groups can login to the box. Credentials caching is disabled. All works well without any problem.
What I need to achieve next: I want one Windows SMB share to be permanently mounted to the Linux (in the fstab or else) using Kerberos(passwordless).
What I have achieved so far: I am able to mount the Windows SMB path, but it expires when the manually generated TGT ticket expires.
How I’m doing it: I generate TGT ticket using ‘kinit’
then TGT ticket for cifs mount using kvnp
Then making an entry in the fstab with ‘sec=krb5’ and providing the uid of the desired service account.
Using the above the SMB share is mounted successfully but expires in 9 hours upon expiration of the TGT ticket.
Please suggest if there is something that I can do to make the mount permanent.
Note: I'm not modifying the TGT ticket expiration time thinking it may cause some security or compliance concerns.(please, correct me if I'm wrong).
linux rhel kerberos smb
asked Jan 15 at 11:01
Rajneesh Gadge
638
@JeffSchaller Thanks, duplicate text removed. I asked this question in StackExchange and was suggested to post here. And the copy/paste error happened.
– Rajneesh Gadge
Jan 15 at 13:05
add a comment |Â
up vote
2
down vote
favorite
up vote
2
down vote
favorite
Environment: I have joined a few of my RHEL 7.3 boxes with MS AD domain using realmd/sssd. I have allowed only members of a few allowed groups can login to the box. Credentials caching is disabled. All works well without any problem.
What I need to achieve next: I want one Windows SMB share to be permanently mounted to the Linux (in the fstab or else) using Kerberos(passwordless).
What I have achieved so far: I am able to mount the Windows SMB path, but it expires when the manually generated TGT ticket expires.
How I’m doing it: I generate TGT ticket using ‘kinit’
then TGT ticket for cifs mount using kvnp
Then making an entry in the fstab with ‘sec=krb5’ and providing the uid of the desired service account.
Using the above the SMB share is mounted successfully but expires in 9 hours upon expiration of the TGT ticket.
Please suggest if there is something that I can do to make the mount permanent.
Note: I'm not modifying the TGT ticket expiration time thinking it may cause some security or compliance concerns.(please, correct me if I'm wrong).
linux rhel kerberos smb
asked Jan 15 at 11:01
Rajneesh Gadge
638
Environment: I have joined a few of my RHEL 7.3 boxes with MS AD domain using realmd/sssd. I have allowed only members of a few allowed groups can login to the box. Credentials caching is disabled. All works well without any problem.
What I need to achieve next: I want one Windows SMB share to be permanently mounted to the Linux (in the fstab or else) using Kerberos(passwordless).
What I have achieved so far: I am able to mount the Windows SMB path, but it expires when the manually generated TGT ticket expires.
How I’m doing it: I generate TGT ticket using ‘kinit’
then TGT ticket for cifs mount using kvnp
Then making an entry in the fstab with ‘sec=krb5’ and providing the uid of the desired service account.
Using the above the SMB share is mounted successfully but expires in 9 hours upon expiration of the TGT ticket.
Please suggest if there is something that I can do to make the mount permanent.
Note: I'm not modifying the TGT ticket expiration time thinking it may cause some security or compliance concerns.(please, correct me if I'm wrong).
linux rhel kerberos smb
asked Jan 15 at 11:01
Rajneesh Gadge
638
edited Jan 15 at 13:04
asked Jan 15 at 11:01
Rajneesh Gadge
638
asked Jan 15 at 11:01
Rajneesh Gadge
638
asked Jan 15 at 11:01
Rajneesh Gadge
638
638
@JeffSchaller Thanks, duplicate text removed. I asked this question in StackExchange and was suggested to post here. And the copy/paste error happened.
– Rajneesh Gadge
Jan 15 at 13:05
add a comment |Â
@JeffSchaller Thanks, duplicate text removed. I asked this question in StackExchange and was suggested to post here. And the copy/paste error happened.
– Rajneesh Gadge
Jan 15 at 13:05
@JeffSchaller Thanks, duplicate text removed. I asked this question in StackExchange and was suggested to post here. And the copy/paste error happened.
– Rajneesh Gadge
Jan 15 at 13:05
@JeffSchaller Thanks, duplicate text removed. I asked this question in StackExchange and was suggested to post here. And the copy/paste error happened.
– Rajneesh Gadge
Jan 15 at 13:05
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f417222%2fhow-to-get-persistent-permanent-smb-mount-using-kerberos-authentication-on-rhe%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
@JeffSchaller Thanks, duplicate text removed. I asked this question in StackExchange and was suggested to post here. And the copy/paste error happened.
– Rajneesh Gadge
Jan 15 at 13:05