From Fedora Project Wiki

(Created page with '{{QA/Test_Case |description=This test case is to run connectathon test suite on a secure NFSv4 root |actions= # You can run both NFS server and client on the same system or use ...')
 
(Update minor wiki syntax)
Line 1: Line 1:
 
{{QA/Test_Case
 
{{QA/Test_Case
|description=This test case is to run connectathon test suite on a secure NFSv4 root
+
|description=This test case is to validates a secure NFSv4 root setup by running the connectathon test suite.
  
 
|actions=
 
|actions=
Line 6: Line 6:
 
#: <pre>
 
#: <pre>
 
#: service ntp restart</pre>
 
#: service ntp restart</pre>
# Install krb5-libs if have not done so, and configure the NFS server to find out the KDC server.
+
# If you have not already done so, install {{package|krb5-libs}}
 +
#: <pre>
 +
#: yum -y install krb5-libs </pre>
 +
# Next, configure the NFS server to find the KDC server.
 
#: <pre>
 
#: <pre>
#: yum -y install krb5-libs
 
 
#: cp /etc/krb5.conf /etc/krb5.conf.orig
 
#: cp /etc/krb5.conf /etc/krb5.conf.orig
 
#: cat <<EOF >/etc/krb5.conf
 
#: cat <<EOF >/etc/krb5.conf
Line 25: Line 27:
 
#:  krb4_convert = false
 
#:  krb4_convert = false
 
#:  krb4_get_tickets = false
 
#:  krb4_get_tickets = false
#: EOF
+
#: EOF</pre>
# Use kadmin to create the server principal.
+
# Now, use {{command|kadmin}} to create the server principal.
 
#: <pre>
 
#: <pre>
 
#: kadmin</pre>
 
#: kadmin</pre>
 
+
# Next, create an NFS export and restart NFS
 
#: <pre>
 
#: <pre>
 
#: cp /etc/exports /etc/exports.orig
 
#: cp /etc/exports /etc/exports.orig

Revision as of 14:29, 1 February 2010

Description

This test case is to validates a secure NFSv4 root setup by running the connectathon test suite.


How to test

  1. You can run both NFS server and client on the same system or use different systems. Configure the server to sync time using NTP to sync the clock for later kerberos communications.
    service ntp restart
  2. If you have not already done so, install Package-x-generic-16.pngkrb5-libs
    yum -y install krb5-libs
  3. Next, configure the NFS server to find the KDC server.
    cp /etc/krb5.conf /etc/krb5.conf.orig
    cat <<EOF >/etc/krb5.conf
    [libdefaults]
    default_realm = GREP.BE
    kdc_timesync = 1
    forwardable = true
    proxiable = true
    [realms]
    GREP.BE = {
    kdc = kdc.grep.be
    kdc = kdc-1.grep.be
    admin_server = kdc.grep.be
    }
    [login]
    krb4_convert = false
    krb4_get_tickets = false
    EOF
  4. Now, use kadmin to create the server principal.
    kadmin
  5. Next, create an NFS export and restart NFS
    cp /etc/exports /etc/exports.orig
    echo '/nfs gss/krb5i(sync,subtree_check,rw)' > /etc/exports
    mkdir /nfs
    service nfs restart
  6. Download the connectathon testsuite
    git clone git://fedorapeople.org/~steved/cthon04
  7. Run the connectathon testsuite from the client.
    cd cthon04
    make
    ./runcthon --server <server IP> --serverdir /nfs

Expected Results

  1. Step #1 completes without error.
  2. The testsuite finishes without error; no nfs*.error files in /tmp.