RPC: AUTH_GSS upcall timed out -- out of ideas

[Kevin Coffman]

On 10/14/06, Andri <aoeuid at gmail.com> wrote:
> Kevin Coffman wrote:
> > On 10/14/06, Andri <aoeuid at gmail.com> wrote:
> >> Got a bit clearer view now thanks to this description:
> >> http://www.citi.umich.edu/projects/nfsv4/gssd/
> >
> > So on the client, mount should call into the kernel.  The kernel will
> > find it needs a gss context and do an upcall to gssd.  It is claiming
> > that there is no gssd running to handle the upcall request
> >
> >>
> >> # tail -2 /var/log/messages
> >> Oct 14 14:24:00 client RPC: AUTH_GSS upcall timed out.
> >> Oct 14 14:24:00 client Please check user daemon is running!
> >>
> >
> > The lack of any output from gssd (to handle an upcall) seems to
> > reinforce this.
> >
> >> # rpc.gssd -vvvf
> >> Using keytab file '/etc/krb5.keytab'
> >> Processing keytab entry for principal 'host/client.realm at REALM'
> >> We will NOT use this entry (host/client.realm at REALM)
> >> Processing keytab entry for principal 'nfs/client.realm at REALM'
> >> We will use this entry (nfs/client.realm at REALM)
> >> Using (machine) credentials cache: 'FILE:/tmp/krb5cc_machine_REALM'
> >> WARNING: gssd_obtain_kernel_krb5_info: Unable to open
> >> '/var/lib/nfs/rpc_pipefs/nfs/krb5_info'. Unable to determine Kerberos
> >> encryption types supported by the kernel; using defaults (1,3,2).
> >>
> >
> > I'm pretty sure you'd have seen an error message, but just be clear:
> > do you have the pipefs mounted?
> Yes, of course :)
>
> > % grep pipefs /etc/fstab
> > rpc_pipefs      /var/lib/nfs/rpc_pipefs rpc_pipefs      defaults 0 0
> > % mount
> > ...
> > rpc_pipefs on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)
> >
> I mounted it manually, but just to be sure I tried again with the fstab
> approach -- nothing seemed to have changed.
>
> # mount | grep pipe
> rpc_pipefs on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)

Try turning on debugging in the kernel code on the client:

# echo 16 >/proc/sys/sunrpc/rpc_debug