Issue

• A fully kerberized server and workstation setup using AD. On one NFS server we both have home directories which we export with sec=krb5p to * and root filesystems for diskless clients that are accessible from internal IPs over NFS3. The /etc/exports looks like this :

/export/home *(rw,sync,no_root_squash,no_subtree_check,sec=krb5p)
/export/diskless 10.0.0.0/8(async,ro,no_subtree_check,no_root_squash)

• Mounting either filesystem on a client fails and mounting /export/diskless over NFS3 works by the way.

client[32]:~# mount -t nfs4 -o sec=krb5p server:/export/home /mnt
mount.nfs4: Operation not permitted
client[32]:~# mount -t nfs4 -o nolock,ro server:/export/diskless /mnt
mount.nfs4: Operation not permitted

• If I comment out one of the exports in /etc/exports, the remaining exported file system can be mounted successfully on the client with the mount command above.

• The expected behavior would of course be that both exports can be there at the same time and can be mounted from clients respectively.