maindavfs2 - Support: sr #110867, Nextcloud+kerberos+autofs


sr #110867: Nextcloud+kerberos+autofs

Submitter:  None
Submitted:  Mon 10 Apr 2023 08:27:01 AM UTC
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  None
Privacy:  Public Assigned to:  None
Originator Email:  -email is unavailable- Open/Closed:  Open
Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup

Mon 10 Apr 2023 08:27:01 AM UTC, original submission:  

Hi to all!

I try to use autofs to automount a Nextcloud using FreeIPA Kerberos SSO.

We have a working Kerberos setup (user get Kerberos ticket after login)
User can login with Kerberos to NextCloud web.

/etc/fstab contains:

http://server/path/to/webdav /mountpoint/webdav davfs noauto,user,rw 0 0

/etc/davfs2/davfs2.conf contains:

ask_auth 0

Other files unmodified.

User can use $mount /mountpoint/webdav and get access to NextCloud WebDAV with Kerberos ticket.

And now I try to use FreeIPA automount.

/etc/davfs2.conf contains:
dav_user freeipauser
ask_auth 0

If I start automount from terminal with root privileges with command:
#start-stop-daemon --start --oknodo --quiet --pidfile /var/run/ --exec /usr/sbin/automount -- --pid-file /var/run/
it works fine and user can use WebDAV, but if I use
#service autofs start
or reboot system with enabled autofs it doesnt work with Kerberos,doesn't even get a ticket.

auth: Got challenge (code 401).
auth: Got 'Negotiate' challenge.
auth: Got 'Basic' challenge.
auth: Trying Negotiate challenge...
auth: Trying Basic challenge...
authentication failure:
auth: No challenges accepted.
Request ends, status 401 class 4xx, error line:
Could not authenticate to server: ignoring empty Negotiate continuation, rejected Basic challenge

Can you help?




(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


CC list is empty


There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.


No changes have been made to this item

Back to the top

Powered by Savane 3.13-758e.
Corresponding source code