trying to authenticate NFS with Active Directory Login

[jahmed]

Hello Guys

(sorry for my english)

My truenas joined the Active Directory Domain. and the NFS is running on the dataset: /mnt/IT/NFS and NSFv4 is enabled
My User ben is in the AD security group IT-Administrator.

I can mount the NFS Share if put in the ACL everyone@ on Allow Full Control. but i want only the group to have access on the Share, and when i do only the Group Domain\IT-Administrator Allow Full Control it doesn't work.

ben@fqdn@clienthostname:~$ sudo mount -t nfs serverhostname:/mnt/IT/NFS /mnt/IT/ -vv

mount.nfs: access denied by server while mounting serverhostname:/mnt/IT/NFS$

i tried:
putting Security to: (SyS) and (KRB5, KRB5I, KRB5P)
enabling: NFSv3 ownership model for NFSv4
enabling Require Kerberos for NFSv4
enabling Allow non-root mount

thanks for your answers