An administrator has been presented with the following requirements from an application owner:• The application...

The user account used by the application.

The Active Directory used by the application.

The password used by the application.

NFSv4.1 with Kerberos requires identity integration through Active Directory and a valid Kerberos-capable user credential. In vSphere, Kerberos authentication for NFS 4.1 uses Active Directory credentials so ESX can authenticate securely when mounting Kerberos-protected NFS datastores. The required inputs are the Active Directory domain, the user account, and the password associated with that account. The storage guide also states that when several ESX hosts access the same NFS 4.1 datastore, all hosts must use the same Active Directory credentials to ensure consistent access. The Organizational Unit is not the required credential element for datastore mounting. The DNS name of a Kerberos server may be resolved through Active Directory and DNS infrastructure, but it is not one of the required configuration values selected here. A “Kerberos Key Management Server” is not part of the vSphere NFSv4.1 Kerberos datastore configuration model. Therefore, the required options are the application’s user account, its Active Directory, and the account password. Reference topics: NFSv4.1 Datastores, Kerberos Authentication, Active Directory Credentials, Kerberos Security for NFS.