System Administration Guide: Security Services

ProcedureHow to Add a Single Entry to the Credential Table

Before You Begin

This procedure requires that the gsscred table has already been created on the NFS server. See How to Create a Credential Table for instructions.

  1. Become superuser on the NFS server.

  2. Add an entry to the credential table by using the gsscred command.


    # gsscred -m mech [ -n name [ -u uid ]] -a
    
    mech

    Defines the security mechanism to be used.

    name

    Defines the principal name for the user, as defined in the KDC.

    uid

    Defines the UID for the user, as defined in the password database.

    -a

    Adds the UID to principal name mapping.


Example 23–2 Adding a Multiple Component Principal to the Credential Table

In the following example, an entry is added for a principal named sandy/admin, which is mapped to UID 3736.


# gsscred -m kerberos_v5 -n sandy/admin -u 3736 -a


Example 23–3 Adding a Principal in a Different Domain to the Credential Table

In the following example, an entry is added for a principal named sandy/admin@EXAMPLE.COM, which is mapped to UID 3736.


# gsscred -m kerberos_v5 -n sandy/admin@EXAMPLE.COM -u 3736 -a