Return-Path: Received: from mx1.redhat.com ([209.132.183.28]:42775 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751849Ab1DWRsH (ORCPT ); Sat, 23 Apr 2011 13:48:07 -0400 Message-ID: <4DB310CE.4080009@RedHat.com> Date: Sat, 23 Apr 2011 13:47:58 -0400 From: Steve Dickson To: Luk Claes CC: Richard Smits , "linux-nfs@vger.kernel.org" Subject: Re: gssd mounts not working References: <4DAFD5B1.9060004@tudelft.nl> <4DB2C32B.7000400@RedHat.com> <4DB30594.1060704@debian.org> In-Reply-To: <4DB30594.1060704@debian.org> Content-Type: text/plain; charset=ISO-8859-1 Sender: linux-nfs-owner@vger.kernel.org List-ID: MIME-Version: 1.0 On 04/23/2011 01:00 PM, Luk Claes wrote: > On 04/23/2011 02:16 PM, Steve Dickson wrote: >> >> >> On 04/21/2011 02:58 AM, Richard Smits wrote: >>> Hello, >>> We are having problems with our gssd nfs mounts. I will explain our situation. >>> >>> Our clients are running SLED 11 SP1. >>> Our server is a Netapp filer with Ontap 7.3.3P4. >>> >>> We provide NFS exported directory's with krb5 security. >>> >>> Our KDC is a Windows 2003 and 2008 Active Directory. >>> >>> If we use nfs-client-1.2.1-8.1 everything works as expected. >>> >>> But if we upgrade to (any) newer client, all gssd mounts fail. Now there is a bugreport on Novell Bugzilla about this : https://bugzilla.novell.com/show_bug.cgi?id=614293#c7 >>> >>> Apperantly if the nfs client is compiled with --disable-tirpc , the ticket size from the AD is to big ? >> Yes this problem was fixed in libitrpc with: >> >> commit 599511589ca7ddb3b2eac8d3aa5b0b38be7a7691 >> Author: Jeff Layton >> Date: Fri Mar 5 14:27:13 2010 -0500 >> >> libtirpc: allow larger ticket sizes with RPCSEC_GSS > > When will 0.2.2 be released? I'll try to get it out sometime next week... steved.