Harald Dunkel via FreeIPA-users wrote:
Hi folks,
Maybe I am confused, but apparently I do not have to activate/modify
host-based access control in Freeipa to support Kerberos for NFS. hbac
is not mentioned on
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...
Is this correct?
Yes, HBAC controls services accessed through PAM.
Would you recommend setting up weak crypto for NFS? I still have a
few Centos 5 hosts, but they are supposed to be retired in the near
future.
Freeipa is version 4.6.4, running on Centos 7.6.
Do we recommend it? No.
rob