On 07/11/13 16:01, Jeff Layton wrote: > On Thu, 7 Nov 2013 11:25:19 -0800 > Chuck Lever <chuck.lever@xxxxxxxxxx> wrote: > >> Hi Steve- >> >> On Nov 7, 2013, at 11:09 AM, Steve Dickson <steved@xxxxxxxxxx> wrote: >> >>> This new module parameter makes the v4 client >>> use the minimal authentication flavor (AUTH_UNIX) >>> when establishing NFSV4 state and doing the >>> pseudoroot lookup >> >> The patch description doesn't say, but is this change to work around the 15 second GSSD upcall timeout? Have we completely given up on fixing the upcall? >> > > That would be my preferred solution too. The whole problem is that this > upcall takes too damned long to time out. > > But...how can it be fixed? > > Due to the way that rpc_pipefs interface works, there's no way that I > can see to make that fail immediately if no one is listening on the > pipe. You could reduce the timeout I guess but that's sort of a > half-assed solution. > > IMO, we're long past due for a new upcall that uses a different design > altogether. Maybe something based on call_usermodehelper that doesn't > require a running daemon? Bingo! I think it would be huge for all these upcalls to work like the idmapping does on the client (aka via call_usermodehelper)... but which the likes of Kerberos it may not be possible... steved. > -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
