Message ID | 1466008496-9932-1-git-send-email-steved@redhat.com (mailing list archive) |
---|---|
State | New, archived |
Headers | show |
diff --git a/systemd/rpc-gssd.service b/systemd/rpc-gssd.service index d4a3819..df9f090 100644 --- a/systemd/rpc-gssd.service +++ b/systemd/rpc-gssd.service @@ -17,3 +17,9 @@ EnvironmentFile=-/run/sysconfig/nfs-utils Type=forking ExecStart=/usr/sbin/rpc.gssd $GSSDARGS + +# Only start if service is enabled +# and /etc/krb5.keytab exists +[Install] +WantedBy=multi-user.target +
When Kerberos is enabled, the /etc/krb5.keytab exists which causes the rpc-gssd to start, automatically. With rpc.gssd running, on all NFS mounts, an upcall is done to get GSS security context for SETCLIENTID procedure. When Kerberos is not configured for NFS, meaning there is no host/hostname@REALM principal in the key tab, those upcalls always fall causing the mount to hang for several seconds. This patch adds an [Install] section so the service can be enable and disable, so those errant upcalls can be stopped which eliminating the delay. Signed-off-by: Steve Dickson <steved@redhat.com> --- systemd/rpc-gssd.service | 6 ++++++ 1 file changed, 6 insertions(+)