rhel5, rhel6: rpc.gssd picks the wrong credential cache

Solution Unverified - Updated -

Issue

  • rpc.gssd iterates over all credentials caches (CC) in /tmp to find the best CC for to create a Secure NFS context. It prefers the CC with the most recent starting time and does not consider the expiry time. It insist on sticking with that CC and does therefore not create secure NFS context until it is deleted.

Logs:

rpc.gssd[2177]: ERROR: GSS-API: error in gss_acquire_cred(): The referenced credential has expired - No error
rpc.gssd[2177]: ERROR: GSS-API: error in gss_acquire_cred(): The referenced credential has expired - No error
rpc.gssd[2177]: WARNING: Failed while limiting krb5 encryption types for user with uid 1001

Environment

  • Red Hat Enterprise Linux (RHEL) 5
  • Red Hat Enterprise Linux (RHEL) 6
  • nfs-utils

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content