From: "J. Bruce Fields" <bfields@fieldses.org>
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Cc: linux-nfs@vger.kernel.org
Subject: Re: linux-image: on nfs4 server: RPC: AUTH_GSS upcall timed out Please check user daemon is running
Date: Thu, 8 Dec 2011 12:45:01 -0500 [thread overview]
Message-ID: <20111208174501.GA30088@fieldses.org> (raw)
In-Reply-To: <8762hrozdl.fsf@fifthhorseman.net>
On Thu, Dec 08, 2011 at 10:29:42AM -0500, Daniel Kahn Gillmor wrote:
> Hello Linux-NFS folks--
>
> I've got an nfs4 server running linux kernel 3.1.1 with nfs-utils 1.2.4.
>
> When an NFSv4 client connects to the server using sec=krb5p, the kernel
> emits:
>
> [ 3505.754807] RPC: AUTH_GSS upcall timed out.
> [ 3505.754810] Please check user daemon is running.
>
> It's true, i don't have rpc.gssd running on the server (though i do have
> rpc.svcgssd running).
>
> But the client can go ahead and mount the filesystem anyway, and users
> with the appropriate krb5 credentials on the clients can access files on
> the server based on their credentials.
>
> So it's not clear to me what this warning is about. Should i be
> running rpc.gssd on the nfs server?
Yes, if you're using NFSv4 then the client and server should each run
both daemons.
> If so, what functionality am i losing out on by not running it?
You lose NFSv4.0 delegations, which depend on the ability for the server
to contact the client to send delegation recalls. Delegations are
optional, so you won't lose correctness, but you may lose some
performance.
If you're using only v2, v3, or v4.1, that doesn't matter. (v2 and v3
lack delegations, and v4.1 sends callbacks over existing
client-established connections).
> If i don't need to run it, why is the kernel emitting this message?
Nevertheless I have seen that message even on machines that were running
both daemons, so I suspect there's a bug here; I haven't made it a
priority to track it down since I haven't seen it cause any actual
problems.
--b.
next prev parent reply other threads:[~2011-12-08 17:45 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-12-08 15:29 linux-image: on nfs4 server: RPC: AUTH_GSS upcall timed out Please check user daemon is running Daniel Kahn Gillmor
2011-12-08 17:45 ` J. Bruce Fields [this message]
2011-12-09 18:31 ` Daniel Kahn Gillmor
2011-12-09 19:10 ` J. Bruce Fields
2012-02-23 5:58 ` Daniel Kahn Gillmor
2012-02-28 19:49 ` J. Bruce Fields
2013-08-11 13:15 ` Mario Bachmann
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20111208174501.GA30088@fieldses.org \
--to=bfields@fieldses.org \
--cc=dkg@fifthhorseman.net \
--cc=linux-nfs@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).