NFSv4/krb5: Cannot mount: "Warning: rpc.gssd appears not to be
running."
Georg C. F. Greve
greve at fsfeurope.org
Mon Aug 14 16:21:09 EDT 2006
|| Christian G. Warden wrote:
> Make sure the server is running rpc.svcgssd. It was removed from the
> nfs-kernel-server package briefly. It was restored in 1:1.0.9-5.
Thanks for the prompt feedback!
Indeed it was not running. I fixed that now.
Now the rpc.gssd -f -vvvvvvvvvvvvvvvvvvvvvvvv on the client gives
Using keytab file '/etc/krb5.keytab'
INFO: Credentials in CC 'FILE:/tmp/krb5cc_machine_MYDOMAIN' are good until 1155621909
using FILE:/tmp/krb5cc_machine_MYDOMAIN as credentials cache for machine creds
using environment variable to select krb5 ccache FILE:/tmp/krb5cc_machine_MYDOMAIN
creating context using fsuid 0 (save_uid 0)
creating tcp client for server server.mydomain
creating context with server nfs at server.mydomain
DEBUG: serialize_krb5_ctx: lucid version!
prepare_krb5_rfc1964_buffer: serializing keys with enctype 4 and length 8
doing downcall
destroying client clnt38
and on the server side I see
krb5kdc[24709]: AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.1.10: ISSUE: authtime 1155586331, etypes {rep=16 tkt=16 ses=16}, nfs/client.mydomain at MYDOMAIN for krbtgt/MYDOMAIN at MYDOMAIN
krb5kdc[24709]: TGS_REQ (1 etypes {1}) 192.168.1.10: ISSUE: authtime 1155586331, etypes {rep=16 tkt=1 ses=1}, nfs/client.mydomain at MYDOMAIN for nfs/server.mydomain at MYDOMAIN
which looks pretty good already, I think.
Mount still says
mount -t nfs4 -o sec=krb5 server.mydomain:/media /mnt
Warning: rpc.gssd appears not to be running.
mount: permission denied
though. So there is still something fishy.
Running rpc.svcgssd with -vvv gives:
rpc.svcgssd[24492]: leaving poll
rpc.svcgssd[24492]: handling null request
rpc.svcgssd[24492]: readline: read 986 chars into buffer of size 2048: \x \x608201e606092a864886f71201020201006e8201d5308201d1a003020105a10302010ea20703050020000000a38201096182010530820101a003020105a1091b0754415241444f53a221301fa003020103a11830161b036e66731b0f66757365626f782e74617261646f73a381cb3081c8a003020101a103020103a281bb0481b8fee563864d1d3b5a27202509f9b4c6bb18bda931493bcfe752647494a605ec94b832ed236b2277e4286fb2fa6160271017627ac77b21c2d77ee1b5d746cf6c8a134b1c9b19e0d8a1054033d96126ebdbc4ad9853fbb0ad780b74a...
rpc.svcgssd[24492]: in_handle:
rpc.svcgssd[24492]: length 0
rpc.svcgssd[24492]:
rpc.svcgssd[24492]: in_tok:
rpc.svcgssd[24492]: length 490
rpc.svcgssd[24492]:
rpc.svcgssd[24492]: 0000: 6082 01e6 0609 2a86 4886 f712 0102 0201 `.....*.H.......
rpc.svcgssd[24492]: 0010: 006e 8201 d530 8201 d1a0 0302 0105 a103 .n...0..........
rpc.svcgssd[24492]: 0020: 0201 0ea2 0703 0500 2000 0000 a382 0109 ........ .......
rpc.svcgssd[24492]: 0030: 6182 0105 3082 0101 a003 0201 05a1 091b a...0...........
rpc.svcgssd[24492]: 0040: 0754 4152 4144 4f53 a221 301f a003 0201 .MYDOMAIN.!0.....
rpc.svcgssd[24492]: 0050: 03a1 1830 161b 036e 6673 1b0f 6675 7365 ...0...nfs..serv
rpc.svcgssd[24492]: 0060: 626f 782e 7461 7261 646f 73a3 81cb 3081 er.mydomain...0.
rpc.svcgssd[24492]: 0070: c8a0 0302 0101 a103 0201 03a2 81bb 0481 ................
rpc.svcgssd[24492]: 0080: b8fe e563 864d 1d3b 5a27 2025 09f9 b4c6 ...c.M.;Z' %....
rpc.svcgssd[24492]: 0090: bb18 bda9 3149 3bcf e752 6474 94a6 05ec ....1I;..Rdt....
rpc.svcgssd[24492]: 00a0: 94b8 32ed 236b 2277 e428 6fb2 fa61 6027 ..2.#k"w.(o..a`'
rpc.svcgssd[24492]: 00b0: 1017 627a c77b 21c2 d77e e1b5 d746 cf6c ..bz.{!..~...F.l
rpc.svcgssd[24492]: 00c0: 8a13 4b1c 9b19 e0d8 a105 4033 d961 26eb ..K....... at 3.a&.
rpc.svcgssd[24492]: 00d0: dbc4 ad98 53fb b0ad 780b 74a0 2538 baf5 ....S...x.t.%8..
rpc.svcgssd[24492]: 00e0: 364a dafd 5fd4 d3c0 8532 7cd5 b704 e6b0 6J.._....2|.....
rpc.svcgssd[24492]: 00f0: 6c67 a3e6 3a36 b72b aea2 5291 f465 6d0a lg..:6.+..R..em.
rpc.svcgssd[24492]: 0100: 42a7 fea6 b631 cddc 54e9 24e5 fae1 ce17 B....1..T.$.....
rpc.svcgssd[24492]: 0110: db6f fdf2 00f2 ad06 fdef 6be2 bd3d 714f .o........k..=qO
rpc.svcgssd[24492]: 0120: 3446 d6af 316d e679 3d69 43d0 0640 1152 4F..1m.y=iC.. at .R
rpc.svcgssd[24492]: 0130: 3ed7 8174 7c01 2134 10a4 81ae 3081 aba0 >..t|.!4....0...
rpc.svcgssd[24492]: 0140: 0302 0101 a281 a304 81a0 a0b1 f60d 2252 .............."R
rpc.svcgssd[24492]: 0150: 6107 75f3 a449 7125 747c f60f 200b ab7c a.u..Iq%t|.. ..|
rpc.svcgssd[24492]: 0160: 9528 412a b95d 536a 73d5 f741 dbc7 dff9 .(A*.]Sjs..A....
rpc.svcgssd[24492]: 0170: 9a6e dd0f 0e9e 5832 96f0 d4c5 0a52 bf63 .n....X2.....R.c
rpc.svcgssd[24492]: 0180: ddd1 92c8 687f 5308 8a97 d726 43fd 6ffa ....h.S....&C.o.
rpc.svcgssd[24492]: 0190: 6728 9fc1 e436 b568 e2ca 8acb 5660 853f g(...6.h....V`.?
rpc.svcgssd[24492]: 01a0: e00a 14f8 4ebc a0fb 2581 6091 3120 8ecd ....N...%.`.1 ..
rpc.svcgssd[24492]: 01b0: 0899 1c68 f4b1 a4d0 4eac 6c68 098b 999d ...h....N.lh....
rpc.svcgssd[24492]: 01c0: 795e 5684 2eb4 2bfc 6096 2339 d981 29fb y^V...+.`.#9..).
rpc.svcgssd[24492]: 01d0: acfe d2d9 8a4d 370d d197 a372 a4e1 bbec .....M7....r....
rpc.svcgssd[24492]: 01e0: 26b0 2d45 e5d5 d112 4559 &.-E....EY
rpc.svcgssd[24492]: sname = nfs/client.mydomain at MYDOMAIN
rpc.svcgssd[24492]: DEBUG: serialize_krb5_ctx: lucid version!
rpc.svcgssd[24492]: prepare_krb5_rfc1964_buffer: serializing keys with enctype 4 and length 8
rpc.svcgssd[24492]: doing downcall
rpc.svcgssd[24492]: \x01000000 2147483647 -1 -1 0 krb5 \x00000000000000008098e4a7e83d050808bcb2afc2abd7a700000000000000000061e144afe41428090000002a864886f712010202040000000800000092ec7a97bc40dfb00400000008000000621c8a674cb02f40
rpc.svcgssd[24492]: sending null reply
rpc.svcgssd[24492]: writing message: \x \x608201e606092a864886f71201020201006e8201d5308201d1a003020105a10302010ea20703050020000000a38201096182010530820101a003020105a1091b0754415241444f53a221301fa003020103a11830161b036e66731b0f66757365626f782e74617261646f73a381cb3081c8a003020101a103020103a281bb0481b8fee563864d1d3b5a27202509f9b4c6bb18bda931493bcfe752647494a605ec94b832ed236b2277e4286fb2fa6160271017627ac77b21c2d77ee1b5d746cf6c8a134b1c9b19e0d8a1054033d96126ebdbc4ad9853fbb0ad780b74a02538baf5364adafd5fd4d3c085327cd5b...
rpc.svcgssd[24492]: finished handling null request
rpc.svcgssd[24492]: entering poll
Relevant versions of nfs-kernel-server & nfs-common are 1.0.9-5.
Any idea where things are stuck?
Regards,
Georg
P.S. I have to say I find the "Warning: rpc.gssd appears not to be
running." quite annoying as an error message, to be honest. It
is very clearly wrong (rpc.gssd is running) and gives pretty
much no hint as to what actually is wrong.
--
Georg C. F. Greve <greve at fsfeurope.org>
Free Software Foundation Europe (http://fsfeurope.org)
Join the Fellowship and protect your freedom! (http://www.fsfe.org)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 306 bytes
Desc: not available
Url : http://linux-nfs.org/pipermail/nfsv4/attachments/20060814/ec8a8ff0/attachment-0001.pgp
More information about the NFSv4
mailing list