Re: ANNOUNCE: nfs-utils-1.2.2 released.

Kevin Coffman
2010-03-08T19:48:36Z

2010/3/8 Lukas Hejtmanek <xhejtman@ics.muni.cz>:
> On Mon, Mar 08, 2010 at 02:21:57PM -0500, Kevin Coffman wrote:
>> So you probably need to add "allow_weak_crypto =3D true" to your
>> /etc/krb5.conf file. =A0(I believe MIT added an API to allow this
>> programmatically, but I haven't been following closely enough.)
>
> well, this one fixes problem with nfs-utils-1.2.0.
>
> The 1.2.2 still segfaults. Any other thoughts or should I start to play b=
isect
> game?

Interesting. Are there any extra Debian nfs-utils patches? I just
tried this with vanilla nfs-utils-1.2.2 and the latest Kerberos (w/o
the allow_weak_crypto config setting) and do not get a segfault. I
get these error messages:

Mar 8 14:40:18 jazz rpc.gssd[7925]: Full hostname for
'screamer.citi.umich.edu' is 'screamer.citi.umich.edu'
Mar 8 14:40:18 jazz rpc.gssd[7925]: Full hostname for
'jazz.citi.umich.edu' is 'jazz.citi.umich.edu'
Mar 8 14:40:18 jazz rpc.gssd[7925]: Key table entry not found while
getting keytab entry for 'root/jazz.citi.umich.edu@'
Mar 8 14:40:18 jazz rpc.gssd[7925]: Success getting keytab entry for
'nfs/jazz.citi.umich.edu@'
Mar 8 14:40:18 jazz rpc.gssd[7925]: INFO: Credentials in CC
'FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU' are good until 1268437187
Mar 8 14:40:18 jazz rpc.gssd[7925]: INFO: Credentials in CC
'FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU' are good until 1268437187
Mar 8 14:40:18 jazz rpc.gssd[7925]: using
FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU as credentials cache for
machine creds
Mar 8 14:40:18 jazz rpc.gssd[7925]: using environment variable to
select krb5 ccache FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU
Mar 8 14:40:18 jazz rpc.gssd[7925]: creating context using fsuid 0 (save_u=
id 0)
Mar 8 14:40:18 jazz rpc.gssd[7925]: creating tcp client for server
screamer.citi.umich.edu
Mar 8 14:40:18 jazz rpc.gssd[7925]: DEBUG: port already set to 2049
Mar 8 14:40:18 jazz rpc.gssd[7925]: creating context with server
nfs@screamer.citi.umich.edu
Mar 8 14:40:18 jazz rpc.gssd[7925]: WARNING: Failed to create krb5
context for user with uid 0 for server screamer.citi.umich.edu
Mar 8 14:40:18 jazz rpc.gssd[7925]: WARNING: Failed to create machine
krb5 context with credentials cache
FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU for server
screamer.citi.umich.edu
Mar 8 14:40:18 jazz rpc.gssd[7925]: WARNING: Failed to create machine
krb5 context with any credentials cache for server
screamer.citi.umich.edu
Mar 8 14:40:18 jazz rpc.gssd[7925]: doing error downcall
Mar 8 14:40:18 jazz rpc.gssd[7925]: Failed to write error downcall!
Mar 8 14:40:18 jazz rpc.gssd[7925]: destroying client
/var/lib/nfs/rpc_pipefs/nfs/clnta
Mar 8 14:40:18 jazz rpc.gssd[7925]: destroying client
/var/lib/nfs/rpc_pipefs/nfs/clnt9

Running rpc.gssd with no debugging, I get:

Mar 8 14:47:02 jazz rpc.gssd[8006]: ERROR: No credentials found for
connection to server screamer.citi.umich.edu