Yes, you¹re right, it works if I set use_fully_qualified_names to false on
both the client and the server. I¹d really like to be able to use fully
qualified names however.
Isaiah
On 9/17/15, 11:37 AM, "John Hodrien" <J.H.Hodrien(a)leeds.ac.uk> wrote:
On Thu, 17 Sep 2015, Isaiah Houston wrote:
> Has anyone else experienced this? I saw there was some effort at an sssd
> plugin for rpcidmapd, but that doesn¹t seem complete yet. Is there a
>viable
> workaround so I can get kerberized nfs mounts up?
Without use_fully_qualified_names, I've had no problems with krb5 NFSv4
and
sssd.
Only thing I do to deal with >16 groups is this on the server:
/etc/sysconfig/nfs:
RPCMOUNTDOPTS="--manage-gids"
We're running rpc.idmapd on the server, but not on the client.
jh