[Freeipa-users] Kerberos enabled NFS error (Key has expired)

[William Muriithi]

Morning,

I did forget to post the version of software I am using:

ipa client:
sssd-ipa-1.11.6-30.el6_6.4.x86_64
ipa-client-3.0.0-50.el6_8.3.x86_64

ipa server:
ipa-server-4.2.0-15.0.1.el7.centos.18.x86_64
sssd-ipa-1.13.0-40.el7_2.12.x86_64

I have seen discussion of a bug where the key wasn't being renewed but
that was back in 2012, so don't look very relevant.


William
On 3 November 2016 at 22:59, William Muriithi
<william.muriithi at gmail.com> wrote:
> Hello
>
> I have NFS server that has been working fine with "sec=sys" for years
> but changed it last weekend to use "sec=krb5" last weekend.  Since
> then, users have been randomly complaining that they are seeing the
> below error:
>
> [alexl at manganese /<7>dtop/simulation/vhdl_example]$ ll /projects/sparrow/meng
>
> ls: cannot access /projects/sparrow/meng: Key has expired
>
> When I login and try to list the content of the same directory, all
> works fine.  What is the root cause of this error?  I have been
> googling for a week, but haven't found any solution so far.
>
> Would appreciate any advice
>
> Regards,
>
> William