@simo has asked if we could extend openQA's FreeIPA tests to cover krb5-authenticated NFS. This is a mechanism by which you can set up an NFS share within a domain and have the domain controller authorize access to it.

I think we ought to be able to do this reasonably easily by extending the domain controller role test to configure one or more such shares, and then extend one or more of the client tests to check the access control (make sure a user / machine which should be able to access the storage actually can, make sure one which shouldn't be able to can't, and so on). Alternatively adding an extra client test specifically for this might be useful/necessary, we'll have to try it and see.

@simo says @rharwood should be able to help us with this effort, including monitoring the results and updating the tests in future. @pschindl , @sumantrom , if either of you is interested in working on this, please feel free. I will try and get around to it in future if I can, but I have quite a few other things at higher priority ATM.