[Solved] Kerberos and Kodi

[Boblepirate]

Hello,

I installed an nfs4 server with kerberos authentication on an x86 server. I want to access these shared folders using kodi on a raspberrypi 3 (note: kodi works perfectly). For the moment, these folders are mounted in the fstab, but due to Kerberos the folders are only visible for root.
With Kerberos authentication it is necessary to log in as a user to obtain a ticket opening access to the folders.
The kodi-standalone installation on the raspberrypi uses a kodi system user (uid < 1000 and nologin shell). So I can't use kodi's startup authentication principle to get the Kerberos ticket.

Do you have any idea how to go about getting a ticket in this configuration?
Any help would be appreciated.

Best regards.

[graysky]

Never tried with Kerberos. You might want to post on the kodi forum as it's not really distro specific nor really RPi specific:make_clickable_callback(MAGIC_URL_FULL, ' ', 'https://forum.kodi.tv/forumdisplay.php?fid=52', '', ' class="postlink"')

[Boblepirate]

I understand what you mean, but I think the solution will come more from the system than from Kodi. If I could figure out how systemd generates the session for the kodi user, maybe I could figure out how to generate a ticket.

[Boblepirate]

The solution was quite simple in the end. All you had to do was create a keytab file to no longer have to ask for the password (the word is encrypted in the file), place it in the /var/lib/kodi folder (chmod 600 and chown kodi:kodi). Then I modified kodi.service to add the following lines:
[code]
[Service]
ExecStartPre=/usr/bin/kinit -V -kt /var/lib/kodi/nfsuser.keytabmake_clickable_callback(MAGIC_URL_EMAIL, ' ', 'nfsuser@EXAMPLE.LOCAL', '', '')
ExecStopPost=/usr/bin/kdestroy -pmake_clickable_callback(MAGIC_URL_EMAIL, ' ', 'nfsuser@EXAMPLE.LOCAL', '', '')
[/code]

[graysky]

Please consider modifying the Arch Wiki Kodi page. Again your solution is not specific to Arch ARM and should be generally applicable.