Comment 26 for bug 794112

Revision history for this message
Matthew L. Dailey (matthew-l-dailey) wrote : Re: Kerberos + LDAP + NFSv4 on Natty - Unable to recover unattended client

Given the discussion on the linux-nfs list, I actually doubt this change will be reverted. I can see that this could potentially be desired behavior, but in some circumstances, it's catastrophic. For example, in our environment we have kerberized nfs home directories. If a user runs something in screen and logs out, they can't ever log back in to renew credentials if they expire. Also, if they're logged into a graphical workstation and credentials expire while the screensaver is running, it can't ever pop up the dialog prompting for password - ouch!

I'm testing the patch provided by John Hughes on the Debian bug and it seems to work really well. The only catch is that you have to edit the gssd.conf upstart script directly, since it doesn't read RPCGSSD_OPTS from the nfs-utils defaults file any more. (bug #564043)

I'm rolling this out to a few of our more public machines this weekend and if all goes well, I'll put together a debdiff.