All of lore.kernel.org
 help / color / mirror / Atom feed
* Re: problem mounting using NFSv4 when using -o sec=krb5  option
@ 2005-03-17 11:59 mehta kiran
  2005-03-17 12:27 ` Suresh Jayaram
  0 siblings, 1 reply; 30+ messages in thread
From: mehta kiran @ 2005-03-17 11:59 UTC (permalink / raw)
  To: Kevin Coffman; +Cc: nfs

Hi kevin , 
 I am using RHEL4 GA.
 kernel : 2.6.9-5.EL
 nfs-utils : nfs-utils-1.0.6-46
  
 As per what you told , i have added entries on both
 client and server.

*client:vcslinux6#klist -k /etc/krb5.keytab
2
nfs/vcslinux6.vxindia.veritas.com@VXINDIA.VERITAS.COM

*server:vcslinux5#klist -k /etc/krb5.keytab

2
nfs/vcslinux5.vxindia.veritas.com@VXINDIA.VERITAS.COM


*kdc:vcslinux1#klist -k /etc/krb5.keytab

2 root/admin@VXINDIA.VERITAS.COM
2
nfs/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM
3
nfs/vcslinux5.vxindia.veritas.com@VXINDIA.VERITAS.COM
2
nfs/vcslinux6.vxindia.veritas.com@VXINDIA.VERITAS.COM

I inserted rpcsec_gss_krb5 module on all machines.
started krb5kdc and kadmind.
started all nfs daemons  , rpc.svcgssd , rpc.idmapd on
server and exported filesystem with proper options.

started rpc.idmapd on client(vcslinux6).
But when i run #rpc.gssd -m -v -f
Mar 17 11:13:03 vcslinux6 kernel: RPC: AUTH_GSS upcall
timed out.
Mar 17 11:13:03 vcslinux6 kernel: Please check user
daemon is running!


in log file:
Using keytab file '/etc/krb5.keytab'
WARNING: Decrypt integrity check failed while getting
initial ticket for principal
'nfs/vcslinux6.vxindia.veritas.com@VXINDIA.VERITAS.COM'
from keytab 'FILE:/etc/krb5.keytab'
ERROR: No usable machine credentials obtained
processing client list

-------
Then i tried making kvno for vcslinux5 (on kdc) = 2
i could not.
[root@vcslinux1 ~]# kadmin
Authenticating as principal
root/admin@VXINDIA.VERITAS.COM with password.
Password for root/admin@VXINDIA.VERITAS.COM:
kadmin:  modprinc -kvno 2
nfs/vcslinux5.vxindia.veritas.com
Principal
"nfs/vcslinux5.vxindia.veritas.com@VXINDIA.VERITAS.COM"
modified.
kadmin:  ktadd -e des-cbc-crc:normal -k /tmp/keytab 
nfs/vcslinux5.vxindia.veritas.com@VXINDIA.VERITAS.COM
Entry for principal
nfs/vcslinux5.vxindia.veritas.com@VXINDIA.VERITAS.COM
with kvno 3, encryption type DES cbc mode with CRC-32
added to keytab WRFILE:/tmp/keytab.

Please let me know where i went wrong .

--- Kevin Coffman <kwc@citi.umich.edu> wrote:
> Also, "failed reading uid from krb5 upcall" and
> "Failed to write error 
> downcall" should not normally happen.  What versions
> of kernel and 
> nfs-utils do you have?
> 
> 
> > > Error in log file on mount 
> > > Mar 16 14:58:43 vcslinux5 rpc.gssd[4258]:
> WARNING:
> > > failed reading uid from krb5 upcall pipe:
> Success
> > > Mar 16 14:58:43 vcslinux5 rpc.gssd[4405]:
> WARNING: Key
> > > table entry not found while getting initial
> ticket for
> > > principal
> > >
>
'nfs/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM'
> > > from keytab 'FILE:/etc/krb5.keytab'
> > > Mar 16 14:58:43 vcslinux5 rpc.gssd[4405]: ERROR:
> No
> > > usable machine credentials obtained
> > > Mar 16 14:58:43 vcslinux5 rpc.gssd[4405]:
> WARNING:
> > > Failed to obtain machine credentials for
> connection to
> > > server vcslinux1.vxindia.veritas.com
> > > Mar 16 14:59:08 vcslinux5 rpc.gssd[2760]:
> WARNING:
> > > Failed to create krb5 context for user with uid
> 0 with
> > > any credentials cache for server
> > > vcslinux1.vxindia.veritas.com
> > > Mar 16 14:59:08 vcslinux5 rpc.gssd[2760]: Failed
> to
> > > write error downcall!
> > > 
> > > thanks,
> > >  --kiran
> 
> 
> 
>
-------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT
> Products from real users.
> Discover which products truly live up to the hype.
> Start reading now.
>
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> _______________________________________________
> NFS maillist  -  NFS@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfs
> 


		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - now with 250MB free storage. Learn more. 
http://info.mail.yahoo.com/mail_250


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 30+ messages in thread
* Re: problem mounting using NFSv4 when using -o sec=krb5  option
@ 2005-03-22 15:39 mehta kiran
  2005-03-22 16:12 ` Kevin Coffman
  0 siblings, 1 reply; 30+ messages in thread
From: mehta kiran @ 2005-03-22 15:39 UTC (permalink / raw)
  To: Kevin Coffman; +Cc: nfs

Hi Kevin , 
 This are some of the lines from your previos mails.
 Sorry , but i could not digest this lines.
------------------

if you create a principal using a password, you should
be able to 
authenticate as that pricipal using that password. 
However, once you 
do a ktadd for that principal the password will no
longer work.  See my 
previous message about what ktadd does.



P.S.  Here is what the ktadd command does:
- It generates a new random key value for the
  principal (with a new key version)
- It puts this new key into the Kerberos DB, replacing
  any previous key with a lower kvno
- It puts this new key into the keytab file that was
  specified

Therefore, each time you run ktadd, the old keytab
entry
becomes obsolete.
---------------------
Why(reason)should password become ineffective after
ktadd ?And if that is the case , why does it ask for
password during addprinc? continuing with this:what is
use of this password then?

thanks,
 --kiran






		
__________________________________ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/ 


-------------------------------------------------------
This SF.net email is sponsored by: 2005 Windows Mobile Application Contest
Submit applications for Windows Mobile(tm)-based Pocket PCs or Smartphones
for the chance to win $25,000 and application distribution. Enter today at
http://ads.osdn.com/?ad_id=6882&alloc_id=15148&op=click
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 30+ messages in thread
* Re: problem mounting using NFSv4 when using -o sec=krb5  option
@ 2005-03-22  4:40 mehta kiran
  2005-03-22  8:06 ` mehta kiran
  0 siblings, 1 reply; 30+ messages in thread
From: mehta kiran @ 2005-03-22  4:40 UTC (permalink / raw)
  To: mehta kiran, Kevin Coffman; +Cc: nfs

Missed one thing.
 I used kadmin.local to create principals(on machine
runnnig KDC)

thanks,
 --kiran
--- mehta kiran <kiranmehta1981@yahoo.com> wrote:
> Hi Kevin , 
>     I created new database and new principal and 
>     keytab files.
> 
>     Kinit does not accept passowrd for principals
>     nfs/vcslinux5.vxindia.veritas.com
>     and
>     nfs/vcslinux6.vxindia.veritas.com
> 
>     Please let me know if i can provide some
> info(and
> how) (logs) which can point out the problem
> 
> thanks,
>  --kiran
> 
> 
> 
> 
> --- Kevin Coffman <kwc@citi.umich.edu> wrote:
> > > 
> > > Hi , 
> > >              I tried things as directed by Trond
> > in
> > >     his previous mail and everything seemed to
> > work
> > >     fine initally. but when i rebooted system , 
> > >     it started giving error whenever i start
> > rpc.gssd
> > >     on client machine.
> > >     Error is :
> > > 
> > > [root@vcslinux6 ~]# Mar 21 14:47:27 vcslinux6
> > > rpc.gssd[3487]: WARNING: Key table entry not
> found
> > > while getting initial ticket for principal
> > >
> >
>
'nfs/vcslinux6.vxindia.veritas.com@VXINDIA.VERITAS.COM'
> > > from keytab 'FILE:/etc/krb5.keytab'
> > > Mar 21 14:47:27 vcslinux6 rpc.gssd[3487]: ERROR:
> > No
> > > usable machine credentials obtained
> > >   
> > >      
> > > while #klist -k /etc/krb5.keytab gives
> > > 2
> > >
> >
>
nfs/vcslinux6.vxindia.veritas.com@VXINDIA.VERITAS.COM
> > 
> > 
> > I'm confused by this, but I do not know what to
> look
> > for.
> > 
> > 
> > > I even tried by recreating kerberos database but
> > in
> > > vain. I still get the same error.
> > 
> > If you recreated the Kerberos database, you need
> to
> > create new principals and keytab files.  Did you
> do
> > this?
> > 
> > > I observed one more thing.
> > > Whenver i create principal(other then
> root/admin)
> > ,
> > > passwords i enter for them during their creation
> > > are not accepted by kinit.
> > 
> > This is also strange and _might_ be related.  How
> > are
> > you creating the principals -- using kadmin or
> > kadmin.local?
> > Which principals are you referring to here?
> > 
> > > 
> > > Please let me know where i went wrong.
> > > 
> > > --thanks,
> > >  --kiran
> > 
> > 
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam
> protection around 
> http://mail.yahoo.com 
> 
> 
>
-------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT
> Products from real users.
> Discover which products truly live up to the hype.
> Start reading now.
>
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> _______________________________________________
> NFS maillist  -  NFS@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfs
> 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 30+ messages in thread
* Re: problem mounting using NFSv4 when using -o sec=krb5  option
@ 2005-03-22  4:13 mehta kiran
  2005-03-22 14:05 ` Kevin Coffman
  0 siblings, 1 reply; 30+ messages in thread
From: mehta kiran @ 2005-03-22  4:13 UTC (permalink / raw)
  To: Kevin Coffman; +Cc: nfs

Hi Kevin , 
    I created new database and new principal and 
    keytab files.

    Kinit does not accept passowrd for principals
    nfs/vcslinux5.vxindia.veritas.com
    and
    nfs/vcslinux6.vxindia.veritas.com

    Please let me know if i can provide some info(and
how) (logs) which can point out the problem

thanks,
 --kiran




--- Kevin Coffman <kwc@citi.umich.edu> wrote:
> > 
> > Hi , 
> >              I tried things as directed by Trond
> in
> >     his previous mail and everything seemed to
> work
> >     fine initally. but when i rebooted system , 
> >     it started giving error whenever i start
> rpc.gssd
> >     on client machine.
> >     Error is :
> > 
> > [root@vcslinux6 ~]# Mar 21 14:47:27 vcslinux6
> > rpc.gssd[3487]: WARNING: Key table entry not found
> > while getting initial ticket for principal
> >
>
'nfs/vcslinux6.vxindia.veritas.com@VXINDIA.VERITAS.COM'
> > from keytab 'FILE:/etc/krb5.keytab'
> > Mar 21 14:47:27 vcslinux6 rpc.gssd[3487]: ERROR:
> No
> > usable machine credentials obtained
> >   
> >      
> > while #klist -k /etc/krb5.keytab gives
> > 2
> >
>
nfs/vcslinux6.vxindia.veritas.com@VXINDIA.VERITAS.COM
> 
> 
> I'm confused by this, but I do not know what to look
> for.
> 
> 
> > I even tried by recreating kerberos database but
> in
> > vain. I still get the same error.
> 
> If you recreated the Kerberos database, you need to
> create new principals and keytab files.  Did you do
> this?
> 
> > I observed one more thing.
> > Whenver i create principal(other then root/admin)
> ,
> > passwords i enter for them during their creation
> > are not accepted by kinit.
> 
> This is also strange and _might_ be related.  How
> are
> you creating the principals -- using kadmin or
> kadmin.local?
> Which principals are you referring to here?
> 
> > 
> > Please let me know where i went wrong.
> > 
> > --thanks,
> >  --kiran
> 
> 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 30+ messages in thread
* Re: problem mounting using NFSv4 when using -o sec=krb5  option
@ 2005-03-16 14:47 mehta kiran
  2005-03-16 15:05 ` Trond Myklebust
  0 siblings, 1 reply; 30+ messages in thread
From: mehta kiran @ 2005-03-16 14:47 UTC (permalink / raw)
  To: Kevin Coffman; +Cc: nfs

I rebooted the machine due to some problem.
That problem has vanished but i get following message

Mar 16 14:04:02 vcslinux5 rpc.gssd[2760]: WARNING:
Failed to obtain machine credentials for connection to
server vcslinux1.vxindia.veritas.com
Mar 16 14:04:02 vcslinux5 rpc.gssd[2760]: WARNING:
failed reading uid from krb5 upcall pipe: Success
Mar 16 14:04:02 vcslinux5 rpc.gssd[4405]: WARNING: Key
table entry not found while getting initial ticket for
principal
'nfs/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM'
from keytab 'FILE:/etc/krb5.keytab'
Mar 16 14:04:02 vcslinux5 rpc.gssd[4405]: ERROR: No
usable machine credentials obtained

thanks,
 --kiran


--- mehta kiran <kiranmehta1981@yahoo.com> wrote:
> Hi , 
>     Yes , module rpcsec_gss_krb5 is loaded.
>     RHEL GA is installed on my machines
> thanks,
>  --kiran
> --- Kevin Coffman <kwc@citi.umich.edu> wrote:
> > Is your server's kernel built with
> > CONFIG_RPCSEC_GSS_KRB5?
> > If it is built as a module, is the module loaded?
> > 
> > 
> > > Hi , 
> > >     I have exported filesystems to client but
> > >     when client mounts using
> > >     mount -t nfs4 -o sec=krb5  vcslinux1:/
> /share 
> >  
> > >     it gets  error :
> > > -------------
> > >      kernel: RPC: Couldn't create auth handle
> > (flavor 
> > >      390003)
> > >      kernel: NFS: cannot create RPC client.
> > >      rpc.idmapd: open
> > >      (/var/lib/nfs/rpc_pipefs/nfs/clnt23)
> > > --------------
> > > 
> > >      nfs sevver is runnnig on vcslinux1 system
> and
> > 
> > >      client on vcslinux5
> > >      
> > >     Ouput of klist -k /etc/krb5.keytab on server
> > > 
> > > 3
> > >
> >
>
nfs/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM
> > > 2 root/admin@VXINDIA.VERITAS.COM
> > > 2
> > >
> >
>
root/vcslinux5.vxindia.veritas.com@VXINDIA.VERITAS.COM
> > >    3
> > >
> >
>
ftp/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM
> > > 
> > > 
> > > All nfs daemons are running. rpc.svcgssd and
> > > rpc.idmapd is also runnnig.
> > > 
> > > On client side rpc.gssd is runnnig with -m
> option.
> > > 
> > > 
> > > thanks,
> > >  --kiran
> > > 
> > > 
> > > 
> > > 
> > > 		
> > > __________________________________ 
> > > Do you Yahoo!? 
> > > Yahoo! Small Business - Try our new resources
> > site!
> > > http://smallbusiness.yahoo.com/resources/ 
> > > 
> > > 
> > >
> >
>
-------------------------------------------------------
> > > SF email is sponsored by - The IT Product Guide
> > > Read honest & candid reviews on hundreds of IT
> > Products from real users.
> > > Discover which products truly live up to the
> hype.
> > Start reading now.
> > >
> >
>
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> > > _______________________________________________
> > > NFS maillist  -  NFS@lists.sourceforge.net
> > > https://lists.sourceforge.net/lists/listinfo/nfs
> > 
> > 
> > 
> 
> 
> 		
> __________________________________ 
> Do you Yahoo!? 
> Yahoo! Small Business - Try our new resources site!
> http://smallbusiness.yahoo.com/resources/ 
> 
> 
>
-------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT
> Products from real users.
> Discover which products truly live up to the hype.
> Start reading now.
>
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> _______________________________________________
> NFS maillist  -  NFS@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfs
> 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 30+ messages in thread
* Re: problem mounting using NFSv4 when using -o sec=krb5  option
@ 2005-03-16 14:36 mehta kiran
  0 siblings, 0 replies; 30+ messages in thread
From: mehta kiran @ 2005-03-16 14:36 UTC (permalink / raw)
  To: Kevin Coffman; +Cc: nfs

Hi , 
    Yes , module rpcsec_gss_krb5 is loaded.
    RHEL GA is installed on my machines
thanks,
 --kiran
--- Kevin Coffman <kwc@citi.umich.edu> wrote:
> Is your server's kernel built with
> CONFIG_RPCSEC_GSS_KRB5?
> If it is built as a module, is the module loaded?
> 
> 
> > Hi , 
> >     I have exported filesystems to client but
> >     when client mounts using
> >     mount -t nfs4 -o sec=krb5  vcslinux1:/ /share 
>  
> >     it gets  error :
> > -------------
> >      kernel: RPC: Couldn't create auth handle
> (flavor 
> >      390003)
> >      kernel: NFS: cannot create RPC client.
> >      rpc.idmapd: open
> >      (/var/lib/nfs/rpc_pipefs/nfs/clnt23)
> > --------------
> > 
> >      nfs sevver is runnnig on vcslinux1 system and
> 
> >      client on vcslinux5
> >      
> >     Ouput of klist -k /etc/krb5.keytab on server
> > 
> > 3
> >
>
nfs/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM
> > 2 root/admin@VXINDIA.VERITAS.COM
> > 2
> >
>
root/vcslinux5.vxindia.veritas.com@VXINDIA.VERITAS.COM
> >    3
> >
>
ftp/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM
> > 
> > 
> > All nfs daemons are running. rpc.svcgssd and
> > rpc.idmapd is also runnnig.
> > 
> > On client side rpc.gssd is runnnig with -m option.
> > 
> > 
> > thanks,
> >  --kiran
> > 
> > 
> > 
> > 
> > 		
> > __________________________________ 
> > Do you Yahoo!? 
> > Yahoo! Small Business - Try our new resources
> site!
> > http://smallbusiness.yahoo.com/resources/ 
> > 
> > 
> >
>
-------------------------------------------------------
> > SF email is sponsored by - The IT Product Guide
> > Read honest & candid reviews on hundreds of IT
> Products from real users.
> > Discover which products truly live up to the hype.
> Start reading now.
> >
>
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> > _______________________________________________
> > NFS maillist  -  NFS@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/nfs
> 
> 
> 


		
__________________________________ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/ 


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 30+ messages in thread
* Re: problem mounting using NFSv4 when using -o sec=krb5  option
@ 2005-03-16 14:36 mehta kiran
  0 siblings, 0 replies; 30+ messages in thread
From: mehta kiran @ 2005-03-16 14:36 UTC (permalink / raw)
  To: Kevin Coffman; +Cc: nfs

Hi , 
    Yes , module rpcsec_gss_krb5 is loaded.
    RHEL GA is installed on my machines
thanks,
 --kiran
--- Kevin Coffman <kwc@citi.umich.edu> wrote:
> Is your server's kernel built with
> CONFIG_RPCSEC_GSS_KRB5?
> If it is built as a module, is the module loaded?
> 
> 
> > Hi , 
> >     I have exported filesystems to client but
> >     when client mounts using
> >     mount -t nfs4 -o sec=krb5  vcslinux1:/ /share 
>  
> >     it gets  error :
> > -------------
> >      kernel: RPC: Couldn't create auth handle
> (flavor 
> >      390003)
> >      kernel: NFS: cannot create RPC client.
> >      rpc.idmapd: open
> >      (/var/lib/nfs/rpc_pipefs/nfs/clnt23)
> > --------------
> > 
> >      nfs sevver is runnnig on vcslinux1 system and
> 
> >      client on vcslinux5
> >      
> >     Ouput of klist -k /etc/krb5.keytab on server
> > 
> > 3
> >
>
nfs/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM
> > 2 root/admin@VXINDIA.VERITAS.COM
> > 2
> >
>
root/vcslinux5.vxindia.veritas.com@VXINDIA.VERITAS.COM
> >    3
> >
>
ftp/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM
> > 
> > 
> > All nfs daemons are running. rpc.svcgssd and
> > rpc.idmapd is also runnnig.
> > 
> > On client side rpc.gssd is runnnig with -m option.
> > 
> > 
> > thanks,
> >  --kiran
> > 
> > 
> > 
> > 
> > 		
> > __________________________________ 
> > Do you Yahoo!? 
> > Yahoo! Small Business - Try our new resources
> site!
> > http://smallbusiness.yahoo.com/resources/ 
> > 
> > 
> >
>
-------------------------------------------------------
> > SF email is sponsored by - The IT Product Guide
> > Read honest & candid reviews on hundreds of IT
> Products from real users.
> > Discover which products truly live up to the hype.
> Start reading now.
> >
>
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> > _______________________________________________
> > NFS maillist  -  NFS@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/nfs
> 
> 
> 


		
__________________________________ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/ 


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 30+ messages in thread
* problem mounting using NFSv4  when using -o sec=krb5 option
@ 2005-03-16 13:39 mehta kiran
  2005-03-16 14:34 ` Kevin Coffman
  0 siblings, 1 reply; 30+ messages in thread
From: mehta kiran @ 2005-03-16 13:39 UTC (permalink / raw)
  To: nfs

Hi , 
    I have exported filesystems to client but
    when client mounts using
    mount -t nfs4 -o sec=krb5  vcslinux1:/ /share   
    it gets  error :
-------------
     kernel: RPC: Couldn't create auth handle (flavor 
     390003)
     kernel: NFS: cannot create RPC client.
     rpc.idmapd: open
     (/var/lib/nfs/rpc_pipefs/nfs/clnt23)
--------------

     nfs sevver is runnnig on vcslinux1 system and 
     client on vcslinux5
     
    Ouput of klist -k /etc/krb5.keytab on server

3
nfs/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM
2 root/admin@VXINDIA.VERITAS.COM
2
root/vcslinux5.vxindia.veritas.com@VXINDIA.VERITAS.COM
   3
ftp/vcslinux1.vxindia.veritas.com@VXINDIA.VERITAS.COM


All nfs daemons are running. rpc.svcgssd and
rpc.idmapd is also runnnig.

On client side rpc.gssd is runnnig with -m option.


thanks,
 --kiran




		
__________________________________ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/ 


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 30+ messages in thread
end of thread, other threads:[~2005-03-22 16:13 UTC | newest]

Thread overview: 30+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-03-17 11:59 problem mounting using NFSv4 when using -o sec=krb5 option mehta kiran
2005-03-17 12:27 ` Suresh Jayaram
2005-03-17 12:53   ` mehta kiran
2005-03-17 12:56   ` mehta kiran
2005-03-17 13:47     ` Suresh Jayaram
2005-03-18  7:43       ` mehta kiran
2005-03-18 14:10         ` Trond Myklebust
2005-03-21 15:11     ` Kevin Coffman
2005-03-21 15:45       ` mehta kiran
2005-03-21 21:36         ` Kevin Coffman
2005-03-21 15:45       ` mehta kiran
  -- strict thread matches above, loose matches on Subject: below --
2005-03-22 15:39 mehta kiran
2005-03-22 16:12 ` Kevin Coffman
2005-03-22  4:40 mehta kiran
2005-03-22  8:06 ` mehta kiran
2005-03-22 14:18   ` Kevin Coffman
2005-03-22 15:15     ` mehta kiran
2005-03-22 15:34       ` Kevin Coffman
2005-03-22 15:41         ` mehta kiran
2005-03-22  4:13 mehta kiran
2005-03-22 14:05 ` Kevin Coffman
2005-03-16 14:47 mehta kiran
2005-03-16 15:05 ` Trond Myklebust
2005-03-16 15:40   ` mehta kiran
2005-03-16 16:12     ` Kevin Coffman
2005-03-16 16:28       ` Kevin Coffman
2005-03-16 14:36 mehta kiran
2005-03-16 14:36 mehta kiran
2005-03-16 13:39 mehta kiran
2005-03-16 14:34 ` Kevin Coffman

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.