On Oct 17, 2014, at 9:42 AM, Colin Hudler <chudler@xxxxxxxxxxxxxxx> wrote:
> We have a few hundred computers mounting an NFS server in a typical LDAP-based users (nss) setup. We frequently add and remove exports and use exportfs -r to update stab.
I know this isn’t your question, but you would be better served by using explicit exportfs -a and exportfs -r commands for the specific changes.
> Every time we do so, the clients report "NFS server not responding" and start backing off their requests. After a painful 3-5 minutes, they recover and life is normal again.
>
> We discovered that when the rpc.mountd cache flushing occurs, our NIS system is overwhelmed with grouplist requests and this obviously blocks things. We are working on that problem separately, and I admit this to be a weakness in our setup. My question is simple.
>
> Why does it flush auth.unix.gid when the etab changed? I think it makes unnecessary work for rpc.mountd because the gids are unlikely to have changed,
Another assumption is that exports rarely change. I expect your setup is an exception to the rule.
> and they already have a reasonable expiration policy.
One way to read what the man page states for exportfs -r:
-r Reexport all directories, synchronizing /var/lib/nfs/etab with /etc/exports and files under /etc/exports.d.
This option removes entries in /var/lib/nfs/etab which have been deleted from /etc/exports or files under
/etc/exports.d, and removes any entries from the kernel export table which are no longer valid.
is that it only removes entries which have been deleted.
Instead, it removes all entries and reexports those that are still valid. The remove of all is what blows away the auth.unix.gid caching.
Using exportfs -a <path> and exportfs -r <path> should solve this for you.
>
> --
> Colin
> --
> To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
