Subscribe

CDOT and NFS and KRB5 issue

Hello,

I am trying bring NFS  and Kerberos on our new CDOT filer.

I followed tr-4073 without success. when I try to mount the volume on "centos 6.4" or Ubuntu 14.1 I am getting below error when do the /usr/sbin/rcp.gssd -f -vvv

# /usr/sbin/rpc.gssd  -f -vvv

beginning poll

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt19

handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt18)

handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '

handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt18)

process_krb5_upcall: service is ''

Full hostname for 'vs1.vmlab1.com' is 'vs1.vmlab1.com'

Full hostname for 'lab-centos-01' is 'lab-centos-01'

No key table entry found for LAB-CENTOS-01$@VMLAB1.COM while getting keytab entry for 'LAB-CENTOS-01$@VMLAB1.COM'

Success getting keytab entry for 'root/lab-centos-01@VMLAB1.COM'

WARNING: Client 'root/lab-centos-01@VMLAB1.COM' not found in Kerberos database while getting initial ticket for principal 'root/lab-centos-01@VMLAB1.COM' using keytab 'FILE:/etc/krb5.keytab'

ERROR: No credentials found for connection to server vs1.vmlab1.com

doing error downcall

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

dir_notify_handler: sig 37 si 0x7fffb3707230 data 0x7fffb3707100

destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt18

destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt17

==

could you please help if any known issues with NFS and Kerberos.

I am using "windows 2008 R2" as our KDC server on the clients we have centrify for Kerberos configuration.