Description of problem: With the default nfs-utils configuration on Fedora 19, a mount takes 15 sec delay. This may be a simple configuration issue but I didn't find any relevant documentation. The problem is present also on Rawhide. Version-Release number of selected component (if applicable): nfs-utils-1.2.8-3.0.fc19.i686 kernel-PAE-3.10.9-200.fc19.i686 systemd-204-9.fc19.i686 How reproducible: Steps to Reproduce: 1. yum -y remove nfs-utils; yum -y install nfs-utils 2. systemctl stop firewalld.service&& setenforce 0 3. echo 1 > /proc/sys/net/ipv6/conf/all/disable_ipv6 4. echo 1 > /proc/sys/net/ipv6/conf/default/disable_ipv6 5. echo "/opt localhost(rw)" > /etc/exports 6. exportfs -rav 7. mkdir /root/opt 8. time mount -vt nfs localhost:/opt /root/opt -overs=4 Actual results: mount.nfs: timeout set for Tue Aug 27 XX:XX:XX 2013 mount.nfs: trying text-based options 'vers=4,addr=127.0.0.1,clientaddr=127.0.0.1' real 0m15.021s user 0m0.002s sys 0m0.008s In /var/log/messages kernel: RPC: AUTH_GSS upcall timed out. kernel: Please check user daemon is running. Expected results: mounts way below 1 sec. Additional info: The problem reported at https://ask.fedoraproject.org/question/30612/nfs-gss-problems-on-f19/ Possible workarounds: 1. start rpc.gssd on the client: systemctl enable nfs-secure.service systemctl start nfs-secure.service This results with "rpc.gssd: ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab ..." in /var/log/messages 2. use -overs=3 when mounting from the client 3. blacklist the rpcsec_gss_krb5 module on the client: echo "blacklist rpcsec_gss_krb5" > /usr/lib/modprobe.d/dist-blacklist.conf reboot
(In reply to marcindulak from comment #0) > Description of problem: > > With the default nfs-utils configuration on Fedora 19, > a mount takes 15 sec delay. > This may be a simple configuration issue but I didn't find any relevant > documentation. The problem is present also on Rawhide. > > Version-Release number of selected component (if applicable): > > nfs-utils-1.2.8-3.0.fc19.i686 > kernel-PAE-3.10.9-200.fc19.i686 > systemd-204-9.fc19.i686 > > How reproducible: > > > Steps to Reproduce: > > 1. yum -y remove nfs-utils; yum -y install nfs-utils > 2. systemctl stop firewalld.service&& setenforce 0 > 3. echo 1 > /proc/sys/net/ipv6/conf/all/disable_ipv6 > 4. echo 1 > /proc/sys/net/ipv6/conf/default/disable_ipv6 > 5. echo "/opt localhost(rw)" > /etc/exports > 6. exportfs -rav > 7. mkdir /root/opt > 8. time mount -vt nfs localhost:/opt /root/opt -overs=4 > > Actual results: > > mount.nfs: timeout set for Tue Aug 27 XX:XX:XX 2013 > mount.nfs: trying text-based options > 'vers=4,addr=127.0.0.1,clientaddr=127.0.0.1' > > real 0m15.021s > user 0m0.002s > sys 0m0.008s > > In /var/log/messages > > kernel: RPC: AUTH_GSS upcall timed out. > kernel: Please check user daemon is running. > > Expected results: > > mounts way below 1 sec. > > Additional info: > > The problem reported at > https://ask.fedoraproject.org/question/30612/nfs-gss-problems-on-f19/ > Possible workarounds: > > 1. start rpc.gssd on the client: > > systemctl enable nfs-secure.service > systemctl start nfs-secure.service > > This results with "rpc.gssd: ERROR: gssd_refresh_krb5_machine_credential: > no usable keytab entry found in keytab ..." in /var/log/messages > > 2. use -overs=3 when mounting from the client > > 3. blacklist the rpcsec_gss_krb5 module on the client: > > echo "blacklist rpcsec_gss_krb5" > /usr/lib/modprobe.d/dist-blacklist.conf echo "blacklist rpcsec_gss_krb5" >> /usr/lib/modprobe.d/dist-blacklist.conf > reboot
You should use /etc/modprobe.d/ for custom configurations: echo "blacklist rpcsec_gss_krb5" > /etc/modprobe.d/blacklist-nfs-gss-krb5.conf
I can confirm exactly the same problem in Fedora 20. Mounting NFS shares takes 15 seconds and these messages are printed to journal: > RPC: AUTH_GSS upcall timed out. > Please check user daemon is running. If I start rpcgssd.service, the mounts are instantaneous. A lot of people are hit by this problem, see: https://bbs.archlinux.org/viewtopic.php?pid=1312879 https://ask.fedoraproject.org/question/30612/nfs-gss-problems-on-f19/ http://joshuawise.com/kerberos-nfs https://wiki.archlinux.org/index.php/NFS#Client (or just google for that error message)
Upstream patch posting: http://article.gmane.org/gmane.linux.nfs/59939
Revised upstream patch posting here: http://article.gmane.org/gmane.linux.nfs/60081
Backported versions of these patches have been merged into f19 and f20 kernels, so this should no longer be a problem there. Please reopen if this is still an issue.