I've had some hard time configuring NFS4 with Kerberos last time. Finally I made it but there are few things I do not fully understand yet. One of them is: why DNS resolution of hostnames is not enough?
I have 2 machines: nfsserver, nfsclient.
Both are resolvable through local DNS, so I can e.g. ping nfsserver from nfsclient by hostname or FQDN and vice versa.
Now I can not mount nfsserver's export until I add its record into /etc/hosts on nfsclient. It freezes on:
mount.nfs4: trying text-based options 'sec=krb5p,addr=10.10.10.100,clientaddr=10.10.10.101'
In /etc/nsswitch.conf I have:
hosts: files dns
What is the reason/mechanism behind it?