nfsv4 mount using kerberos 5p fails after upgrading to ontap 9.9.1
Applies to
- Ontap 9.9.1
- NFS
- kerberos 5p
Issue
When an export policy rule has been configued to allow only kerberos 5p connections and the system is running 9.9.1 or later.
- Is necessary to specify krb5p mount option on the client for mont to be successful as as security flavor negotiation would not work properly
- Automount configurations may not allow mounting nfs resources
If NFS sktraces are enabled the following subsequent lines would appear in sktrace.log when the issue is hit
[1:0] Nfs4Req_5: CurrentFlags before NGProcessExportCheck: cfs=0x1004, EAI=0x0 [1:0] Nfs4Req_5: Result EXPORT_NOACCESS: Result=3106