Your message dated Sat, 24 Apr 2021 08:11:27 -0700 (PDT)
with message-id <[email protected]>
and subject line Closing this bug (BTS maintenance for src:linux bugs)
has caused the Debian Bug report #705922,
regarding NFS/kerberos
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
705922: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705922
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: linux-image
Version: 3.2.0-4-amd64
After upgrading from Squeeze to Wheezy the above mentioned kernel was
installed and now I am unable to mount an NFS/krbi share:
$ mount -v /fs
mount.nfs4: timeout set for Mon Apr 22 10:21:59 2013
mount.nfs4: trying text-based options
'sec=krb5i,addr=10.15.21.216,clientaddr=10.1.43.100'
mount.nfs4: mount(2): Permission denied
mount.nfs4: access denied by server while mounting XXX:/
rpc.gssd gives the following debug output:
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c50b0 data 0x7ffff33c4f80
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c05b0 data 0x7ffff33c0480
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c05b0 data 0x7ffff33c0480
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: handling gssd upcall
(/var/lib/nfs/rpc_pipefs/nfs/clntd)
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: handle_gssd_upcall: 'mech=krb5 uid=0
enctypes=18,17,16,23,3,1,2 '
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: handling krb5 upcall
(/var/lib/nfs/rpc_pipefs/nfs/clntd)
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: process_krb5_upcall: service is
'<null>'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: Full hostname for
'fsnfs4.mynetwork.local' is 'fsnfs4.mynetwork.local'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: Full hostname for
'l0144045.mynetwork.local' is 'l0144045.mynetwork.local'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: No key table entry found for
L0144045$.MYNETWORK.LOCAL while getting keytab entry for 'L0144045$@'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: No key table entry found for
root/l0144045.mynetwork.local.MYNETWORK.LOCAL while getting keytab entry for
'root/l0144045.mynetwork.local@'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: Success getting keytab entry for
'nfs/l0144045.mynetwork.local@'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: INFO: Credentials in CC
'FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL' are good until 1366705137
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: INFO: Credentials in CC
'FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL' are good until 1366705137
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: using
FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL as credentials cache for machine creds
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: using environment variable to select
krb5 ccache FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: creating context using fsuid 0
(save_uid 0)
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: creating tcp client for server
fsnfs4.mynetwork.local
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: DEBUG: port already set to 2049
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: creating context with server
[email protected]
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: WARNING: Failed to create krb5 context
for user with uid 0 for server fsnfs4.mynetwork.local
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: WARNING: Failed to create machine krb5
context with credentials cache FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL for
server fsnfs4.mynetwork.local
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: WARNING: Machine cache is prematurely
expired or corrupted trying to recreate cache for server fsnfs4.mynetwork.local
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: Full hostname for
'fsnfs4.mynetwork.local' is 'fsnfs4.mynetwork.local'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: Full hostname for
'l0144045.mynetwork.local' is 'l0144045.mynetwork.local'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: No key table entry found for
L0144045$.MYNETWORK.LOCAL while getting keytab entry for 'L0144045$@'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: No key table entry found for
root/l0144045.mynetwork.local.MYNETWORK.LOCAL while getting keytab entry for
'root/l0144045.mynetwork.local@'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: Success getting keytab entry for
'nfs/l0144045.mynetwork.local@'
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: INFO: Credentials in CC
'FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL' are good until 1366705137
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: INFO: Credentials in CC
'FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL' are good until 1366705137
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: using
FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL as credentials cache for machine creds
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: using environment variable to select
krb5 ccache FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: creating context using fsuid 0
(save_uid 0)
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: creating tcp client for server
fsnfs4.mynetwork.local
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: DEBUG: port already set to 2049
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: creating context with server
[email protected]
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: WARNING: Failed to create krb5 context
for user with uid 0 for server fsnfs4.mynetwork.local
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: WARNING: Failed to create machine krb5
context with credentials cache FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL for
server fsnfs4.mynetwork.local
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: WARNING: Failed to create machine krb5
context with any credentials cache for server fsnfs4.mynetwork.local
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: doing error downcall
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c50b0 data 0x7ffff33c4f80
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c50b0 data 0x7ffff33c4f80
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c50b0 data 0x7ffff33c4f80
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c50b0 data 0x7ffff33c4f80
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c50b0 data 0x7ffff33c4f80
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c50b0 data 0x7ffff33c4f80
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: dir_notify_handler: sig 37 si
0x7ffff33c50b0 data 0x7ffff33c4f80
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: destroying client
/var/lib/nfs/rpc_pipefs/nfs/clnte
Apr 22 10:23:47 l0144045 rpc.gssd[1795]: destroying client
/var/lib/nfs/rpc_pipefs/nfs/clntd
Using kernel linux-image-2.6.32-5-amd64 (from squeeze) it still works:
$ mount -v /fs/
mount.nfs4: timeout set for Mon Apr 22 10:32:39 2013
mount.nfs4: trying text-based options
'sec=krb5i,addr=10.15.21.216,clientaddr=10.1.43.100'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: dir_notify_handler: sig 37 si
0x7ffface6b0f0 data 0x7ffface6afc0
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: dir_notify_handler: sig 37 si
0x7ffface6b0f0 data 0x7ffface6afc0
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: dir_notify_handler: sig 37 si
0x7ffface6b0f0 data 0x7ffface6afc0
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: handling gssd upcall
(/var/lib/nfs/rpc_pipefs/nfs/clntc)
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: handle_gssd_upcall: 'mech=krb5 uid=0 '
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: handling krb5 upcall
(/var/lib/nfs/rpc_pipefs/nfs/clntc)
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: process_krb5_upcall: service is
'<null>'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: Full hostname for
'fsnfs4.mynetwork.local' is 'fsnfs4.mynetwork.local'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: Full hostname for
'l0144045.mynetwork.local' is 'l0144045.mynetwork.local'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: No key table entry found for
L0144045$.MYNETWORK.LOCAL while getting keytab entry for 'L0144045$@'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: No key table entry found for
root/l0144045.mynetwork.local.MYNETWORK.LOCAL while getting keytab entry for
'root/l0144045.mynetwork.local@'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: Success getting keytab entry for
'nfs/l0144045.mynetwork.local@'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: INFO: Credentials in CC
'FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL' are good until 1366705769
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: INFO: Credentials in CC
'FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL' are good until 1366705769
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: using
FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL as credentials cache for machine creds
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: using environment variable to select
krb5 ccache FILE:/tmp/krb5cc_machine.MYNETWORK.LOCAL
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: creating context using fsuid 0
(save_uid 0)
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: creating tcp client for server
fsnfs4.mynetwork.local
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: DEBUG: port already set to 2049
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: creating context with server
[email protected]
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: DEBUG: serialize_krb5_ctx: lucid
version!
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: prepare_krb5_rfc1964_buffer:
serializing keys with enctype 4 and length 8
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: doing downcall
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: handling gssd upcall
(/var/lib/nfs/rpc_pipefs/nfs/clntc)
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: handle_gssd_upcall: 'mech=krb5
uid=13186 '
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: handling krb5 upcall
(/var/lib/nfs/rpc_pipefs/nfs/clntc)
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: process_krb5_upcall: service is
'<null>'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: getting credentials for client with
uid 13186 for server fsnfs4.mynetwork.local
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: CC file '/tmp/krb5cc_13186_T9uhB8'
being considered, with preferred realm .MYNETWORK.LOCAL'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: CC file
'/tmp/krb5cc_13186_T9uhB8'(shuber.MYNETWORK.LOCAL) passed all checks and has
mtime of 1366619399
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: CC file
'/tmp/krb5cc_machine.MYNETWORK.LOCAL' being considered, with preferred realm
.MYNETWORK.LOCAL'
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: CC file
'/tmp/krb5cc_machine.MYNETWORK.LOCAL' owned by 0, not 13186
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: using FILE:/tmp/krb5cc_13186_T9uhB8 as
credentials cache for client with uid 13186 for server fsnfs4.mynetwork.local
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: using environment variable to select
krb5 ccache FILE:/tmp/krb5cc_13186_T9uhB8
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: creating context using fsuid 13186
(save_uid 0)
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: creating tcp client for server
fsnfs4.mynetwork.local
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: DEBUG: port already set to 2049
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: creating context with server
[email protected]
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: DEBUG: serialize_krb5_ctx: lucid
version!
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: prepare_krb5_rfc1964_buffer:
serializing keys with enctype 4 and length 8
Apr 22 10:33:03 l0144045 rpc.gssd[1882]: doing downcall
(In the above logs I replaced some hostname with XXX resp. MYNETWORK.)
Best regards
Stefan
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Hi
This bug was filed for a very old kernel or the bug is old itself
without resolution.
If you can reproduce it with
- the current version in unstable/testing
- the latest kernel from backports
please reopen the bug, see https://www.debian.org/Bugs/server-control
for details.
Regards,
Salvatore
--- End Message ---
