Microsoft KB Archive/828878

= Services for NFS supports services for user extensions =

Article ID: 828878

Article Last Modified on 11/15/2007

-

APPLIES TO


 * Microsoft Windows Storage Server 2003

-





SYMPTOMS
Microsoft Services for Network File System (NFS) on Microsoft Windows Storage Server 2003 requires that Server for NFS Authentication is installed on each domain controller in the domain. It does not take advantage of Kerberos extensions in Windows Server 2003.



RESOLUTION
A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that this article describes. Apply this hotfix only to systems that are experiencing this specific problem.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

http://go.microsoft.com/?linkid=6294451

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

The English version of this has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.   Date         Time   Version            Size    File name --  12-Sep-2003  21:07  7.1.2239.3        422,912  Nfssvr.sys



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section of this article.



MORE INFORMATION
Windows Server 2003 Active Directory introduces support for constrained delegation by leveraging the S4U2Proxy extension to the Kerberos protocol. This extension allows services in the domain to act on behalf of a user. When you apply this hotfix, you do not have to install Server for NFS Authentication on domain controllers on a Windows Server 2003 domain for Server for NFS to authenticate domain users.

No configuration is necessary to enable the S4U2Proxy extension. Notice that the S4U2Proxy extensions are not enabled in a domain unless all the domain controllers are Windows Server 2003.

