Ok, I'm beginning to fear that using gss_iov for krb5p is causing problems, try this
quick ntirpc patch and see if it makes a difference:
diff --git a/src/authgss_prot.c b/src/authgss_prot.c
index b01578f..409da6e 100644
--- a/src/authgss_prot.c
+++ b/src/authgss_prot.c
@@ -267,7 +267,7 @@ xdr_rpc_gss_wrap(XDR *xdrs, xdrproc_t xdr_func, void *xdr_ptr,
* If it's privacy, and NEWBUF is supported (because xdrs is a vector)
* then NEWBUF will have allocated the new buffer.
*/
- vector = (svc == RPCSEC_GSS_SVC_INTEGRITY) || XDR_NEWBUF(xdrs);
+ vector = (svc == RPCSEC_GSS_SVC_INTEGRITY);
/* Marshal rpc_gss_data_t (sequence number + arguments).
* If it's a vector, the response has been marshalled into a new
-----Original Message-----
From: Chakra Divi [mailto:chakragithub@gmail.com]
Sent: Tuesday, October 13, 2020 9:26 AM
To: devel(a)lists.nfs-ganesha.org
Subject: [NFS-Ganesha-Devel] Re: Issues seen with krb5i and krb5p mounts
with krb5i - i'm not seeing not much degradation - when compared with v2.5.
v2.5 - krb5i - 14m6.888s
v3 - krb5i - 18m55.072s
with krb5p - v3 took more than 50% time than v2.5
_______________________________________________
Devel mailing list -- devel(a)lists.nfs-ganesha.org To unsubscribe send an email to
devel-leave(a)lists.nfs-ganesha.org