Thank you both for your help!

Check this out...

➜ ~ cat /etc/default/nfs-kernel-server
RPCNFSDCOUNT=8
RPCNFSDPRIORITY=0
RPCMOUNTDOPTS="--manage-gids"
NEED_SVCGSSD="yes"
RPCSVCGSSDOPTS=""

The entry 'NEED_SVCGSSD="yes"' is 'NEED_SVCGSSD=""' by default.

Problem solved. Thank you!

Hopefully these mailing list archives will help someone in the future.

Andrew Jackman
kd7nyq@???


On Sun, Feb 14, 2021 at 4:49 AM Andreas Messer <andi@???> wrote:

> On Sun, Feb 14, 2021 at 12:23:05AM -0700, Jackman via Dng wrote:
> > Has anyone successfully gotten NFS and Kerberos working together on
> > Beowulf? I was able to get a working setup going in a fresh Debian Buster
> > VM in about 10 minutes. On the other hand, I've been working on trying to
> > get it working on Beowulf for two days without success.
>
> I'm currently using samba4 active directory based kerberos with NFS4
> (and windows shares) and prior to that i also used MIT kerberos
> successfully without any issue.
>
> On the NFS4 server:
>
> cat /etc/exports
>

> /srv/nfs4
>  *(rw,async,root_squash,crossmnt,fsid=0,sec=krb5i,no_subtree_check)
> /srv/nfs4/Benutzer    *(rw,async,sec=krb5i,no_subtree_check)
> .....

>
> cat /etc/default/nfs-common
> NEED_STATD=no
> STATDOPTS=
> NEED_IDMAPD=yes
> NEED_GSSD=yes
>
> Could you double check, that the kerberos keytabs for the services are
> properly configured. You might also check that dns is working properly.
>
> > ➜ ~ mount -t nfs4 storage0:/srv/nfs-test /mnt/test -v
>
> You need to specify "-o sec=krb5i" when mounting (at least I do that
> here). I also use the fqdn of the server.
>
>
> --
> gnuPG keyid: 8C2BAF51
> fingerprint: 28EE 8438 E688 D992 3661 C753 90B3 BAAA 8C2B AF51
> _______________________________________________
> Dng mailing list
> Dng@???
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>