On Mon, Aug 5, 2024 at 5:51 PM marc eshel <eshel.marc@xxxxxxxxx> wrote: > > Hi Trond, > > Will the Linux NFS client try to us krb5i regardless of the MDS > configuration? > > Is there any option to avoid it? I was under the impression the linux client has no way of choosing a different auth_gss security flavor for the DS than the MDS. Meaning that if mount command has say sec=krb5i then both MDS and DS connections have to do krb5i and if say the DS isn't configured for Kerberos, then IO would fallback to MDS. I no longer have a pnfs server to verify whether or not what I say is true but that is what my memory tells me is the case. > > Thanks, Marc. > > ul 30 11:10:58 svl-marcrh-node-1 kernel: nfs4_fl_alloc_deviceid_node > stripe count 1 > Jul 30 11:10:58 svl-marcrh-node-1 kernel: nfs4_fl_alloc_deviceid_node > ds_num 1 > Jul 30 11:10:58 svl-marcrh-node-1 kernel: RPC: Couldn't create > auth handle (flavor 390004) > >
