rhel5, rhel6: rpc.gssd picks the wrong credential cache
Issue
rpc.gssd
iterates over all credentials caches (CC) in/tmp
to find the best CC for to create a Secure NFS context. It prefers the CC with the most recent starting time and does not consider the expiry time. It insist on sticking with that CC and does therefore not create secure NFS context until it is deleted.
Logs:
rpc.gssd[2177]: ERROR: GSS-API: error in gss_acquire_cred(): The referenced credential has expired - No error
rpc.gssd[2177]: ERROR: GSS-API: error in gss_acquire_cred(): The referenced credential has expired - No error
rpc.gssd[2177]: WARNING: Failed while limiting krb5 encryption types for user with uid 1001
Environment
- Red Hat Enterprise Linux (RHEL) 5
- Red Hat Enterprise Linux (RHEL) 6
- nfs-utils
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.