doing a full rescan
handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 ' (nfs/clnt16)
krb5_use_machine_creds: uid 0 tgtname (null)
Full hostname for 'kerberos.<domain>' is 'kerberos.<domain>'
Full hostname for 'mbp-vvh.<domain>' is 'mbp-vvh.<domain>'
No key table entry found for mbp-vvh$@<realm> while getting keytab entry for 'mbp-vvh$@<realm>'
No key table entry found for MBP-VVH$@<realm> while getting keytab entry for 'MBP-VVH$@<realm>'
No key table entry found for root/mbp-vvh.<domain>@<realm> while getting keytab entry for 'root/mbp-vvh.<domain>@<realm>'
Success getting keytab entry for 'nfs/mbp-vvh.<domain>@<realm>'
gssd_get_single_krb5_cred: principal 'nfs/mbp-vvh.<domain>@<realm>' ccache:'FILE:/tmp/krb5ccmachine_<realm>'
INFO: Credentials in CC 'FILE:/tmp/krb5ccmachine_<realm>' are good until 1535691263
creating tcp client for server kerberos.<domain>
DEBUG: port already set to 2049
creating context with server nfs@kerberos.<domain>
doing downcall: lifetime_rec=36000 acceptor=nfs@kerberos.<domain>
handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 ' (nfs/clnt16)
krb5_not_machine_creds: uid 0 tgtname (null)
ERROR: GSS-API: error in gss_acquire_cred(): GSS_S_FAILURE (Unspecified GSS failure.  Minor code may provide more information) - No Kerberos credentials available (default cache: KEYRING:persistent:0)
looking for client creds with uid 0 for server kerberos.<domain> in /tmp
CC '/tmp/krb5ccmachine_<realm>' being considered, with preferred realm '<realm>'
CC '/tmp/krb5ccmachine_<realm>' not available to root
looking for client creds with uid 0 for server kerberos.<domain> in /run/user/%U
Error doing scandir on directory '/run/user/0': No such file or directory
doing error downcall
handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 ' (nfs/clnt16)
krb5_not_machine_creds: uid 0 tgtname (null)
ERROR: GSS-API: error in gss_acquire_cred(): GSS_S_FAILURE (Unspecified GSS failure.  Minor code may provide more information) - No Kerberos credentials available (default cache: KEYRING:persistent:0)
looking for client creds with uid 0 for server kerberos.<domain> in /tmp
CC '/tmp/krb5ccmachine_<realm>' being considered, with preferred realm '<realm>'
CC '/tmp/krb5ccmachine_<realm>' not available to root
looking for client creds with uid 0 for server kerberos.<domain> in /run/user/%U
Error doing scandir on directory '/run/user/0': No such file or directory
doing error downcall

doing a full rescan
handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 ' (nfs/clnt18)
krb5_use_machine_creds: uid 0 tgtname (null)
Full hostname for 'kerberos.<domain>' is 'kerberos.<domain>'
Full hostname for 'mbp-vvh.<domain>' is 'mbp-vvh.<domain>'
No key table entry found for mbp-vvh$@<realm> while getting keytab entry for 'mbp-vvh$@<realm>'
No key table entry found for MBP-VVH$@<realm> while getting keytab entry for 'MBP-VVH$@<realm>'
No key table entry found for root/mbp-vvh.<domain>@<realm> while getting keytab entry for 'root/mbp-vvh.<domain>@<realm>'
Success getting keytab entry for 'nfs/mbp-vvh.<domain>@<realm>'
gssd_get_single_krb5_cred: principal 'nfs/mbp-vvh.<domain>@<realm>' ccache:'FILE:/tmp/krb5ccmachine_<realm>'
INFO: Credentials in CC 'FILE:/tmp/krb5ccmachine_<realm>' are good until 1535692233
creating tcp client for server kerberos.<domain>
DEBUG: port already set to 2049
creating context with server nfs@kerberos.<domain>
doing downcall: lifetime_rec=36000 acceptor=nfs@kerberos.<domain>

handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 ' (nfs/clnt18)
krb5_not_machine_creds: uid 0 tgtname (null)
creating tcp client for server kerberos.<domain>
DEBUG: port already set to 2049
creating context with server nfs@kerberos.<domain>
doing downcall: lifetime_rec=31899 acceptor=nfs@kerberos.<domain>

handle_gssd_upcall: 'mech=krb5 uid=5000 enctypes=18,17,16,23,3,1,2 ' (nfs/clnt18)
krb5_not_machine_creds: uid 5000 tgtname (null)
creating tcp client for server kerberos.<domain>
DEBUG: port already set to 2049
creating context with server nfs@kerberos.<domain>
doing downcall: lifetime_rec=31899 acceptor=nfs@kerberos.<domain>

# klist
Ticket cache: KEYRING:persistent:5000:krb_ccache_9goNVq2
Default principal: vvanhoutte/admin@<realm>

Valid starting     Expires            Service principal
30-08-18 20:30:59  31-08-18 06:02:13  nfs/kerberos.<domain>@<realm>
    renew until 31-08-18 20:02:08
30-08-18 20:02:13  31-08-18 06:02:13  krbtgt/<realm>@<realm>
    renew until 31-08-18 20:02:08

$ klist
Ticket cache: KEYRING:persistent:5000:krb_ccache_9goNVq2
Default principal: vvanhoutte/admin@<realm>

Valid starting     Expires            Service principal
30-08-18 20:30:59  31-08-18 06:02:13  nfs/kerberos.<domain>@<realm>
    renew until 31-08-18 20:02:08
30-08-18 20:02:13  31-08-18 06:02:13  krbtgt/<realm>@<realm>
    renew until 31-08-18 20:02:08

kerberos.<domain>:/     /share  nfs4    rw,hard,async,rsize=32768,wsize=32768,noatime,nodiratime,users,noauto,nolock,vers=4,minorversion=1,nofsc,ac,sec=krb5p   0   0

/srv/nfs4       gss/krb5p(fsid=0,insecure,rw,sync,no_subtree_check)
/srv/nfs4/homes gss/krb5p(insecure,rw,sync,no_subtree_check,nohide)