NFSv4 + Kerberos + users

[J. Bruce Fields]

On Fri, Jun 22, 2007 at 01:10:51PM -0400, Kevin Coffman wrote:
> Assuming that the svcgssd output looks like the previous examples you
> sent, it appears that the server-side kernel is returning
> GSS_S_NO_CONTEXT.  (That is clearly what is being sent, and I'm
> assuming that rpc.svcgssd is not returning it.)
> 
> There have been reports of this in the past where restarting
> rpc.svcgssd on the server has "fixed" it.  I don't know that we've
> definitively figured out what the problem is.  It looked like it might
> be a memory allocation problem, but I never understood how restarting
> rpc.svcgssd helped that.
> 
> Could you try restarting rpc.svcgssd on the server to see if that has
> any effect, and remind me what kernel version you have on the server?

Wouldn't you know, just by coincidence when I walked in this morning and
turned on my desktop I found all access to my home directory denied with
a permissions error which a kinit wouldn't fix.  It appears the server
is returning GSS_S_NO_CONTEXT to everything.  I'm burrowing into the
code at the moment.

I've seen similar before occasionally too, but never found a way to
reproduce it reliably.  So, if somebody has one, that's excellent news.
I'll see if I can come up with a patch, or at least suggest some
debugging.

--b.