/etc/nfs/realm.map file

Edit online

This file is used by the NFS registry daemon to map incoming Kerberos principals of the form name@kerberos-realm to the form name@nfs-domain.

It then can resolve the name@nfs-domain to a local UNIX credential. This file provides a simple way to map Kerberos principals into the server's user registry. It is appropriate when clients in different Kerberos realms will be accessing the server, but the user namespace is global. The file should contain lines in the following format:

realm1 nfs-domain
realm2 nfs-domain

for all Kerberos realms the server supports. If the Kerberos realm name is always the same as the server's NFS domain, this file is not needed. If you need the more general capability of mapping userA@kerberos-realm to userB@nfs-domain, use the Enterprise Identity Mapping (EIM) service. For additional information, see Identity mapping.

To add, edit, or remove entries in this file, use the chnfsrtd command.