rhel5, rhel6: rpc.gssd picks the wrong credential cache

Solution Unverified - Updated -

Issue

  • rpc.gssd iterates over all credentials caches (CC) in /tmp to find the best CC for to create a Secure NFS context. It prefers the CC with the most recent starting time and does not consider the expiry time. It insist on sticking with that CC and does therefore not create secure NFS context until it is deleted.

Logs:

rpc.gssd[2177]: ERROR: GSS-API: error in gss_acquire_cred(): The referenced credential has expired - No error
rpc.gssd[2177]: ERROR: GSS-API: error in gss_acquire_cred(): The referenced credential has expired - No error
rpc.gssd[2177]: WARNING: Failed while limiting krb5 encryption types for user with uid 1001

Environment

  • Red Hat Enterprise Linux (RHEL) 5
  • Red Hat Enterprise Linux (RHEL) 6
  • nfs-utils

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.