On Wed, Jul 24, 2019 at 6:31 AM Benjamin Kaduk <ka...@mit.edu> wrote: > > It's hard to come up with many scenarios in which they could be related. > The only remotely plausible one that comes to mind is if the idmapd is > somehow using a different keytab (or libkrb5) than the core NFS server, but > I don't remember the architecture working like that.
It was caused by sssd 1.16.3 -> 2.2.0 upgrading (and apparently invalidating) a cache database on the server. I apologize for writing. krb5-NFSv4 is complicated to understand. Felix
