Jeff, list, Jeff Layton schreef: > It sounds more like you have a problem with idmapping rather than > anything krb5 specific, but I'm not sure why that would be the case > with sec=krb5 and not with sec=sys. Well, I did, in fact. At least, that is what I'm currently seeing with another system, where "networkmanager" messes with the hosts-file, and as a result, effectively wipes out the FQDN. Thus, idmapd thinks that "localdomain" (added by networkmanager - why?? - no that's not a question, just venting my frustration ;) was a good guess to test the logged in user against: rpc.idmapd: nss_getpwnam: name 'valentyn@xxxxxxxxxxxxxxxxxxxxx' domain 'localdomain': resulting localname '(null)' (We run idmapd relying on DNS instead of a "Domain = " clause, because we thought that made us flexible - I'll rethink that decision.) V. -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html