Debian-users! Na een paar dagen afwezigheid lukt het de nfs-clients plotseling niet meer in mijn nfs4-server in te loggen. Het lijkt aan kerberos te liggen.
nfs4-server:/var/log/syslog: "... Jan 3 21:20:39 custard rpc.gssd[15716]: exiting on signal 15 Jan 3 21:20:39 custard rpc.statd[15700]: Caught signal 15, un-registering and exiting. Jan 3 21:20:40 custard rpc.statd[16890]: Version 1.1.2 Starting Jan 3 21:20:41 custard rpc.idmapd[16901]: libnfsidmap: using domain: <domain> Jan 3 21:20:41 custard rpc.idmapd[16901]: libnfsidmap: using translation method: nsswitch Jan 3 21:20:41 custard rpc.idmapd[16902]: Expiration time is 600 seconds. Jan 3 21:20:41 custard rpc.idmapd[16902]: Opened /proc/net/rpc/nfs4.nametoid/channel Jan 3 21:20:41 custard rpc.idmapd[16902]: Opened /proc/net/rpc/nfs4.idtoname/channel Jan 3 21:20:41 custard rpc.gssd[16905]: rpcsec_gss: debug level is 3 Jan 3 21:20:41 custard rpc.gssd[16906]: beginning poll Jan 3 21:20:42 custard nfsd[16946]: nfssvc: Setting version failed: errno 16 (Device or resource busy) Jan 3 21:20:42 custard rpc.svcgssd[16957]: rpcsec_gss: debug level is 3 Jan 3 21:20:42 custard rpc.svcgssd[16958]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure. Minor code may provide more information - No principal in keytab matches desired name Jan 3 21:20:42 custard rpc.svcgssd[16958]: Unable to obtain credentials for 'nfs' Jan 3 21:20:42 custard rpc.svcgssd[16958]: unable to obtain root (machine) credentials Jan 3 21:20:42 custard rpc.svcgssd[16958]: do you have a keytab entry for nfs/<your.host>@<YOUR.REALM> in /etc/krb5.keytab? ..." De conf's en keytab's waren de laatste tijd niet gewijzigd. Waarom denkt kerberos plotseling dat de keytab entry voor nfs/<nfs-server>@<REALM> afwezig is? Doeg, Jaap. -- Jaap van Wingerde e-mail: [email protected] web: http://jaap.vanwingerde.net/
signature.asc
Description: PGP signature
