From Fedora Project Wiki

Revision as of 14:29, 1 February 2010 by Jlaska (talk | contribs) (Update minor wiki syntax)


This test case is to validates a secure NFSv4 root setup by running the connectathon test suite.

How to test

  1. You can run both NFS server and client on the same system or use different systems. Configure the server to sync time using NTP to sync the clock for later kerberos communications.
    service ntp restart
  2. If you have not already done so, install Package-x-generic-16.pngkrb5-libs
    yum -y install krb5-libs
  3. Next, configure the NFS server to find the KDC server.
    cp /etc/krb5.conf /etc/krb5.conf.orig
    cat <<EOF >/etc/krb5.conf
    default_realm = GREP.BE
    kdc_timesync = 1
    forwardable = true
    proxiable = true
    GREP.BE = {
    kdc =
    kdc =
    admin_server =
    krb4_convert = false
    krb4_get_tickets = false
  4. Now, use kadmin to create the server principal.
  5. Next, create an NFS export and restart NFS
    cp /etc/exports /etc/exports.orig
    echo '/nfs gss/krb5i(sync,subtree_check,rw)' > /etc/exports
    mkdir /nfs
    service nfs restart
  6. Download the connectathon testsuite
    git clone git://
  7. Run the connectathon testsuite from the client.
    cd cthon04
    ./runcthon --server <server IP> --serverdir /nfs

Expected Results

  1. Step #1 completes without error.
  2. The testsuite finishes without error; no nfs*.error files in /tmp.