Return-Path: linux-nfs-owner@vger.kernel.org Received: from mx1.redhat.com ([209.132.183.28]:59865 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752088Ab3KGVBU (ORCPT ); Thu, 7 Nov 2013 16:01:20 -0500 Date: Thu, 7 Nov 2013 16:01:15 -0500 From: Jeff Layton To: Chuck Lever Cc: Steve Dickson , Trond Myklebust , Linux NFS Mailing list Subject: Re: [PATCH] Adding the nfs4_use_min_auth module parameter Message-ID: <20131107160115.0f2bd8a8@tlielax.poochiereds.net> In-Reply-To: References: <1383851364-8370-1-git-send-email-steved@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Sender: linux-nfs-owner@vger.kernel.org List-ID: On Thu, 7 Nov 2013 11:25:19 -0800 Chuck Lever wrote: > Hi Steve- > > On Nov 7, 2013, at 11:09 AM, Steve Dickson wrote: > > > This new module parameter makes the v4 client > > use the minimal authentication flavor (AUTH_UNIX) > > when establishing NFSV4 state and doing the > > pseudoroot lookup > > The patch description doesn't say, but is this change to work around the 15 second GSSD upcall timeout? Have we completely given up on fixing the upcall? > That would be my preferred solution too. The whole problem is that this upcall takes too damned long to time out. But...how can it be fixed? Due to the way that rpc_pipefs interface works, there's no way that I can see to make that fail immediately if no one is listening on the pipe. You could reduce the timeout I guess but that's sort of a half-assed solution. IMO, we're long past due for a new upcall that uses a different design altogether. Maybe something based on call_usermodehelper that doesn't require a running daemon? -- Jeff Layton