Submitted by Piete Brooks on Mon, 07/02/2011 - 14:49
Any users of the "slogin-serv" service should be aware that changes are to be made which may require them to run "kinit" to access their home directory.
Lab Linux machines are moving from using NFS with sec=sys (which trusts the client OS user information to auth users) to sec=krb5 (which requires the user to have a kerberos ticket to indicate what access they should have) to improve the security of user files on the central NFS server. Users of new or upgraded Linux systems will be used to sec=krb5, but it's a bit different on servers. Some hints and tips are available on the NFS sec=krb5 web page. We will be moving the main "slogin-serv" service over starting the week beginning 2011/02/07. Initially the name 'slogin-serv' will point at the existing sec=krb5 instance. Users may need to type "kinit" (or equivalent) to get access to the filer. Users experiencing problems should login to 'slogin-old' (or 'slogin-serv9' or 'ramsey') and then email sys-admin explaining the problem. When we are confident that things are basically working, one of the old servers ('ramsey') will move over to sec=krb5. When we are happy that everything is working, the temporary name 'slogin-old' will be removed, and 'slogin-serv9' will be retired. Users are encouraged to try the new service in advance by connecting to ssh-remote-0, and send any feedback to sys-admin
