Re: [CentOS] kerberized-nfs - any experts out there?

2017-03-23 Thread Matt Garman
On Wed, Mar 22, 2017 at 6:11 PM, John Jasen wrote: > On 03/22/2017 03:26 PM, Matt Garman wrote: >> Is anyone on the list using kerberized-nfs on any kind of scale? > > Not for a good many years. > > Are you using v3 or v4 NFS? v4. I think you can only do kerberized

Re: [CentOS] kerberized-nfs - any experts out there?

2017-03-23 Thread Matt Garman
On Wed, Mar 22, 2017 at 3:19 PM, wrote: > Matt Garman wrote: >> (2) Permission denied issues. I have user Kerberos tickets >> configured for 70 days. But there is clearly some kind of >> undocumented kernel caching going on. Looking at the Kerberos server >> logs, it

Re: [CentOS] kerberized-nfs - any experts out there?

2017-03-22 Thread John Jasen
On 03/22/2017 03:26 PM, Matt Garman wrote: > Is anyone on the list using kerberized-nfs on any kind of scale? Not for a good many years. Are you using v3 or v4 NFS? Also, you can probably stuff the rpc.gss* and idmapd services into verbose mode, which may give you a better ideas as to whats

Re: [CentOS] kerberized-nfs - any experts out there?

2017-03-22 Thread James A. Peltier
Feel free to contact me offline if you wish. I'll just go on record as saying that it's a bear - On 22 Mar, 2017, at 12:26, Matt Garman matthew.gar...@gmail.com wrote: | Is anyone on the list using kerberized-nfs on any kind of scale? | | I've been fighting with this for years. In

Re: [CentOS] kerberized-nfs - any experts out there?

2017-03-22 Thread m . roth
Matt Garman wrote: > Is anyone on the list using kerberized-nfs on any kind of scale? > We use it here. I don't think I'm an expert - my manager is - but let me think about your issues. > Just to give a little insight into our issues: we have an > in-house-developed compute job dispatching

[CentOS] kerberized-nfs - any experts out there?

2017-03-22 Thread Matt Garman
Is anyone on the list using kerberized-nfs on any kind of scale? I've been fighting with this for years. In general, when we have issues with this system, they are random and/or not repeatable. I've had very little luck with community support. I hope I don't offend by saying that! Rather, my