KVNO matches but rpc.svcgssd insists it doesn't.

[Kevin Coffman]

On 3/23/07, Omri Schwarz <ocschwar at mit.edu> wrote:
> Hi, folks, I am trying to get Kerberized
> NFS going on in my shop. I have two hosts running
> Fedora Core 6, i386, with nfs-utils-1.0.10-5.fc6.
>
> On the putative server, rpc.svcgssd
> continues to insist that the KVNO for nfs/server at REALM
> rpc.svcgssd[2980]: ERROR: GSS-API: error in handle_nullreq:
> gss_accept_sec_context(): Unspecified GSS failure.  Minor code may provide
> more information - Key version number for principal in key table is
> incorrect
> Mar 23 14:52:45 giordano rpc.svcgssd[2980]: WARNING: failed to write
> message
>
> Yet when I check with kinit and kadmin, I keep seeing that
> the KVNO does in fact match.
>
> This is preventing me from doing test mounts.
> What to do? Many thanks for all replies.

Hi Omri,
What does "klist -e -k" on the server say?  (perhaps there are
multiple keys for "nfs/server"?)  The kvno there matches what is in
the DB (via kadmin)?

K.C.