maindavfs2 - Support: sr #110867, Nextcloud+kerberos+autofs

 
 

sr #110867: Nextcloud+kerberos+autofs

Submitter:  None
Submitted:  Mon 10 Apr 2023 08:27:01 AM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  None
Privacy:  Public Assigned to:  None
Originator Email:  -email is unavailable- Open/Closed:  Open
Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 10 Apr 2023 08:27:01 AM UTC, original submission:  

Hi to all!

I try to use autofs to automount a Nextcloud using FreeIPA Kerberos SSO.

We have a working Kerberos setup (user get Kerberos ticket after login)
User can login with Kerberos to NextCloud web.

/etc/fstab contains:

http://server/path/to/webdav /mountpoint/webdav davfs noauto,user,rw 0 0

/etc/davfs2/davfs2.conf contains:

ask_auth 0

Other files unmodified.

User can use $mount /mountpoint/webdav and get access to NextCloud WebDAV with Kerberos ticket.

And now I try to use FreeIPA automount.

/etc/davfs2.conf contains:
dav_user freeipauser
ask_auth 0

If I start automount from terminal with root privileges with command:
#start-stop-daemon --start --oknodo --quiet --pidfile /var/run/autofs.pid --exec /usr/sbin/automount -- --pid-file /var/run/autofs.pid
it works fine and user can use WebDAV, but if I use
#service autofs start
or reboot system with enabled autofs it doesnt work with Kerberos,doesn't even get a ticket.

auth: Got challenge (code 401).
auth: Got 'Negotiate' challenge.
auth: Got 'Basic' challenge.
auth: Trying Negotiate challenge...
auth: Trying Basic challenge...
authentication failure:
WebDAV
auth: No challenges accepted.
Request ends, status 401 class 4xx, error line:
Could not authenticate to server: ignoring empty Negotiate continuation, rejected Basic challenge

Can you help?

Thanks!


Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

No changes have been made to this item

Back to the top

Powered by Savane 3.13-4448.
Corresponding source code