Hey,
are you two actually using NFSv4 with Kerberos integrity or security? 'cause that daemon should only be needed in that case, not for NFSv2 or v3. And in a default UCS setup NFSv4 with Kerberos isn’t provided out of the box. As a matter of fact, it doesn’t seem to work with Samba4’s Kerberos at the moment either.
So this is something that can probably be ignored. If it annoys you, tell systemd
not to start the unit via systemctl mask rpc-svcgssd.service
The actual reason why the start of the daemon fails is that it cannot find the Kerberos principal nfs/FQDN@REALM
in /etc/krb5.keytab
. You can see the actual error message by running /usr/sbin/rpc.svcgssd -f
— and you can verify you don’t have that principal via ktutil --keytab=/etc/krb5.keytab list
Kind regards,
mosu