Re: NFS4 kerberos

[Louis Garcia <louisgtwo@xxxxxxxxx>]

I found this on the client.

gssproxy[661]: gssproxy[672]: (OID: { 1 2 840 113554 1 2 2 }) Unspecified GSS failure.  Minor code may provide more information, No credentials cache found
gssproxy[672]: (OID: { 1 2 840 113554 1 2 2 }) Unspecified GSS failure.  Minor code may provide more information, No credentials cache found

This is right after, not sure if related.

audit[651]: USER_AVC pid=651 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error er
                                                     exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'

On Tue, Aug 1, 2017 at 7:00 PM, Rick Stevens <ricks@xxxxxxxxxxxxxx> wrote:

On 08/01/2017 03:24 PM, Louis Garcia wrote:
> I've setup a kdc server and I'm able to kinit from my client and get a
> ticket for ssh, nfs. I'm noticing nfs slow to mount, and disconnects
> randomly when mounted with sec=krb5p. When I mount insecurely this does
> not happen. I read that this has to do with gss but have not found a
> solution.

Have you checked journald's output for gss-related messages?
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer, AllDigital    ricks@xxxxxxxxxxxxxx -
- AIM/Skype: therps2        ICQ: 226437340           Yahoo: origrps2 -
-                                                                    -
-         We have enough youth, how about a fountain of SMART?       -
----------------------------------------------------------------------
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@lists.fedoraproject.org

_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx