On Thu, 17 Sep 2015, Isaiah Houston wrote:
Has anyone else experienced this? I saw there was some effort at an
sssd
plugin for rpcidmapd, but that doesn’t seem complete yet. Is there a viable
workaround so I can get kerberized nfs mounts up?
Without use_fully_qualified_names, I've had no problems with krb5 NFSv4 and
sssd.
Only thing I do to deal with >16 groups is this on the server:
/etc/sysconfig/nfs:
RPCMOUNTDOPTS="--manage-gids"
We're running rpc.idmapd on the server, but not on the client.
jh