Date: 2026-02-06 (UTC)
Host: drg-k8s.auth.home.lan (192.168.1.216)
Server: kryptovisor.auth.home.lan (192.168.1.4)
Scope: NFSv4.2 client auth config
Use the host keytab for gssproxy NFS client credentials to resolve krb5p auth failures.
/etc/krb5.keytabs/k8s-nfs-access.keytab to /etc/krb5.keytab./mnt/fastdata and /mnt/bigdata.cat /etc/gssproxy/99-nfs-client.confsudo tee /etc/gssproxy/99-nfs-client.conf < /home/ax_julian/temp/99-nfs-client.confsudo kill -HUP $(cat /run/gssproxy.pid)sudo pkill rpc.gssdsudo /usr/sbin/rpc.gssdsudo mkdir -p /home/ax_julian/temp/gssproxy-ccache-2026-02-06sudo mv /var/lib/gssproxy/clients/krb5cc_nfs_* /home/ax_julian/temp/gssproxy-ccache-2026-02-06/sudo umount /mnt/fastdata /mnt/bigdatasudo mount -asudo -u ax_julian ls -la /mnt/fastdata | headsudo -u ax_julian ls -la /mnt/bigdata | headPermission denied and Stale file handle at both export roots.systemctl restart gssproxy rpc-gssd timed out via D-Bus, so manual reload/restart used./etc/gssproxy/99-nfs-client.conf to use /etc/krb5.keytabs/k8s-nfs-access.keytab./home/ax_julian/temp/gssproxy-ccache-2026-02-06/ to /var/lib/gssproxy/clients/.nfs/drg-k8s.auth.home.lan principal (IPA/admin action).ax_julian and host principals.Stale file handle on server if exports were reconfigured.rpc.idmapd manually (/usr/sbin/rpc.idmapd) to ensure NFSv4 idmapping service is running.rpc.idmapd running, but access still denied for /mnt/fastdata and /mnt/bigdata.Stale file handle cleared after remount; permissions still denied for root and ax_julian.klist -e shows nfs/kryptovisor.auth.home.lan@AUTH.HOME.LAN and krbtgt/AUTH.HOME.LAN@AUTH.HOME.LAN.systemctl restart rpc-gssd and systemctl restart nfs-idmapd rpc-gssd both timed out via D-Bus; manual restarts used for rpc.gssd and rpc.idmapd.ls still returns Permission denied for /mnt/fastdata and /mnt/bigdata.