background

Hosts are:

• Server: Debian Wheezy RC1 amd64 (nfs-kernel-server 1:1.2.6-3, libnfsidmap2 0.25-4, libnss-ldapd 0.8.10-4, nslcd 0.8.10-4)
• Client: Debian Squeeze amd64 (nfs-kernel-server 1:1.2.2-4squeeze2, libnfsidmap2 0.23-2, libnss-ldapd 0.7.15+squeeze3, nslcd 0.7.15+squeeze3)

System configurations

• Account service: both server and client are under LDAP mapping, using nsswitch
• Network: on the same subnet (intranet), w/o iptables

NFS configurations (same for both server and client)

/etc/default/nfs-common

NEED_STATD=
STATDOPTS=
NEED_IDMAPD=yes
NEED_GSSD=

/etc/default/nfs-kernel-server (nothing changed; server only)

RPCNFSDCOUNT=8
RPCNFSDPRIORITY=0
RPCMOUNTDOPTS=--manage-gids
NEED_SVCGSSD=
RPCSVCGSSDOPTS=

/etc/idmapd.conf

[General]
Verbosity = 0
Pipefs-Directory = /var/lib/nfs/rpc_pipefs
Domain = pfs.ipmj.jp
[Translation]
Method = nsswitch
[Mapping]
Nobody-User = nobody
Nobody-Group = nogroup

/etc/exports (server only)

/server     10.100.200.0/24(rw,sync,no_subtree_check,no_root_squash)

/etc/fstab (client only)

10.100.200.3:/server /server nfs4 bg,hard,rw 0 0

Config command outputs

“getent passwd” returns same output on both side

atsushi.shimono:*:1200:2000:Atsushi Shimono:/home/atsushi.shimono:/bin/tcsh

Errors

Error recorded via syslog

rpc.idmapd[10224]: nss_getpwnam: name 'root@pfs.ipmu.jp' 
does not map into domain 'pfs.ipmj.jp'

Tweak…

Finally gave up to use NFSv4, and changed to v3.

/etc/default/nfs-common

NEED_STATD=yes

/etc/fstab

10.100.200.3:/server /server nfs nfsvers=3,bg,hard,rw 0 0

Check

 nfsstat -m
/mnt/newdata from 10.100.200.3:/server
 Flags: rw,relatime,vers=3,rsize=262144,wsize=262144,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=10.100.200.3,mountvers=3,mountport=37737,mountproto=udp,addr=10.100.200.3