2019-08-04 03:08:57

by Orion Poplawski

[permalink] [raw]
Subject: NFS issues

NFS folks -

I'm not able to mount a kerberos nfs share from a Ubuntu 18 machine on a
Fedora 30 machine. Fedora 29 client works fine. I get a permission
denied message.

tshark of a good mount (fedora 29) shows:

1 0.000000000 10.20.0.103 → 10.20.0.113 TCP 74 918 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=288485228 TSecr=0 WS=128
2 0.000030102 10.20.0.113 → 10.20.0.103 TCP 74 2049 → 918 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=4183280970
TSecr=288485228 WS=1024
3 0.000174310 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=288485228 TSecr=4183280970
4 0.000239603 10.20.0.103 → 10.20.0.113 NFS 110 V4 NULL Call
5 0.000254004 10.20.0.113 → 10.20.0.103 TCP 66 2049 → 918 [ACK] Seq=1
Ack=45 Win=29696 Len=0 TSval=4183280970 TSecr=288485228
6 0.000296947 10.20.0.113 → 10.20.0.103 NFS 94 V4 NULL Reply (Call In 4)
7 0.000404978 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=45
Ack=29 Win=64256 Len=0 TSval=288485228 TSecr=4183280970
8 0.004237895 10.20.0.103 → 10.20.0.113 TCP 74 48130 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=288485232 TSecr=0 WS=128
9 0.004253521 10.20.0.113 → 10.20.0.103 TCP 74 2049 → 48130 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=4183280974
TSecr=288485232 WS=1024
10 0.004369004 10.20.0.103 → 10.20.0.113 TCP 66 48130 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=288485232 TSecr=4183280974
11 0.005828117 10.20.0.103 → 10.20.0.113 NFS 794 V4 NULL Call
12 0.005849856 10.20.0.113 → 10.20.0.103 TCP 66 2049 → 48130 [ACK] Seq=1
Ack=729 Win=30720 Len=0 TSval=4183280976 TSecr=288485234
13 0.095938819 10.20.0.113 → 10.20.0.103 NFS 302 V4 NULL Reply (Call In 11)
14 0.096111595 10.20.0.103 → 10.20.0.113 TCP 66 48130 → 2049 [ACK]
Seq=729 Ack=237 Win=64128 Len=0 TSval=288485324 TSecr=4183281066
15 0.098142107 10.20.0.103 → 10.20.0.113 TCP 66 48130 → 2049 [FIN, ACK]
Seq=729 Ack=237 Win=64128 Len=0 TSval=288485326 TSecr=4183281066
16 0.098180271 10.20.0.113 → 10.20.0.103 TCP 66 2049 → 48130 [FIN, ACK]
Seq=237 Ack=730 Win=30720 Len=0 TSval=4183281068 TSecr=288485326
17 0.098228095 10.20.0.103 → 10.20.0.113 NFS 422 V4 Call EXCHANGE_ID
18 0.098312096 10.20.0.103 → 10.20.0.113 TCP 66 48130 → 2049 [ACK]
Seq=730 Ack=238 Win=64128 Len=0 TSval=288485326 TSecr=4183281068
19 0.098524259 10.20.0.113 → 10.20.0.103 NFS 294 V4 Reply (Call In 17)
EXCHANGE_ID
20 0.098665985 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=401
Ack=257 Win=64128 Len=0 TSval=288485327 TSecr=4183281068
21 0.099040906 10.20.0.103 → 10.20.0.113 NFS 422 V4 Call EXCHANGE_ID
22 0.099365808 10.20.0.113 → 10.20.0.103 NFS 294 V4 Reply (Call In 21)
EXCHANGE_ID
23 0.099505159 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=757
Ack=485 Win=64128 Len=0 TSval=288485327 TSecr=4183281069
24 0.099660059 10.20.0.103 → 10.20.0.113 NFS 342 V4 Call CREATE_SESSION
25 0.099912920 10.20.0.113 → 10.20.0.103 NFS 262 V4 Reply (Call In 24)
CREATE_SESSION
26 0.100050242 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=1033
Ack=681 Win=64128 Len=0 TSval=288485328 TSecr=4183281070
27 0.100321564 10.20.0.103 → 10.20.0.113 NFS 258 V4 Call RECLAIM_COMPLETE
28 0.100667507 10.20.0.113 → 10.20.0.103 NFS 226 V4 Reply (Call In 27)
RECLAIM_COMPLETE
29 0.100799523 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=1225
Ack=841 Win=64128 Len=0 TSval=288485329 TSecr=4183281070
30 0.103706911 10.20.0.103 → 10.20.0.113 TCP 74 48132 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=288485332 TSecr=0 WS=128
31 0.103728633 10.20.0.113 → 10.20.0.103 TCP 74 2049 → 48132 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=4183281074
TSecr=288485332 WS=1024
32 0.103843153 10.20.0.103 → 10.20.0.113 TCP 66 48132 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=288485332 TSecr=4183281074
33 0.105321006 10.20.0.103 → 10.20.0.113 NFS 794 V4 NULL Call
34 0.105335747 10.20.0.113 → 10.20.0.103 TCP 66 2049 → 48132 [ACK] Seq=1
Ack=729 Win=30720 Len=0 TSval=4183281075 TSecr=288485333
35 0.107338897 10.20.0.113 → 10.20.0.103 NFS 302 V4 NULL Reply (Call In 33)
36 0.107477920 10.20.0.103 → 10.20.0.113 TCP 66 48132 → 2049 [ACK]
Seq=729 Ack=237 Win=64128 Len=0 TSval=288485335 TSecr=4183281077
37 0.109053969 10.20.0.103 → 10.20.0.113 TCP 66 48132 → 2049 [FIN, ACK]
Seq=729 Ack=237 Win=64128 Len=0 TSval=288485337 TSecr=4183281077
38 0.109075129 10.20.0.113 → 10.20.0.103 TCP 66 2049 → 48132 [FIN, ACK]
Seq=237 Ack=730 Win=30720 Len=0 TSval=4183281079 TSecr=288485337
39 0.109106232 10.20.0.103 → 10.20.0.113 NFS 234 V4 Call PUTROOTFH | GETATTR
40 0.109202715 10.20.0.103 → 10.20.0.113 TCP 66 48132 → 2049 [ACK]
Seq=730 Ack=238 Win=64128 Len=0 TSval=288485337 TSecr=4183281079
41 0.111807037 10.20.0.113 → 10.20.0.103 NFS 382 V4 Reply (Call In 39)
PUTROOTFH | GETATTR
42 0.111995051 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=1393
Ack=1157 Win=64128 Len=0 TSval=288485340 TSecr=4183281082
43 0.120330726 10.20.0.103 → 10.20.0.113 NFS 246 V4 Call GETATTR FH:
0x62d40c52
44 0.120437822 10.20.0.113 → 10.20.0.103 NFS 262 V4 Reply (Call In 43)
GETATTR
45 0.120603518 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=1573
Ack=1353 Win=64128 Len=0 TSval=288485348 TSecr=4183281090
46 0.120754755 10.20.0.103 → 10.20.0.113 NFS 246 V4 Call GETATTR FH:
0x62d40c52
47 0.120802333 10.20.0.113 → 10.20.0.103 NFS 262 V4 Reply (Call In 46)
GETATTR
48 0.120920242 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=1753
Ack=1549 Win=64128 Len=0 TSval=288485349 TSecr=4183281091
49 0.121076010 10.20.0.103 → 10.20.0.113 NFS 246 V4 Call GETATTR FH:
0x62d40c52
50 0.121156404 10.20.0.113 → 10.20.0.103 NFS 262 V4 Reply (Call In 49)
GETATTR
51 0.121359930 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=1933
Ack=1745 Win=64128 Len=0 TSval=288485349 TSecr=4183281091
52 0.121456510 10.20.0.103 → 10.20.0.113 NFS 246 V4 Call GETATTR FH:
0x62d40c52
53 0.121499845 10.20.0.113 → 10.20.0.103 NFS 262 V4 Reply (Call In 52)
GETATTR
54 0.121719612 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=2113
Ack=1941 Win=64128 Len=0 TSval=288485350 TSecr=4183281091
55 0.121814917 10.20.0.103 → 10.20.0.113 NFS 238 V4 Call GETATTR FH:
0x62d40c52
56 0.121901547 10.20.0.113 → 10.20.0.103 NFS 214 V4 Reply (Call In 55)
GETATTR
57 0.122118977 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=2285
Ack=2089 Win=64128 Len=0 TSval=288485350 TSecr=4183281092
58 0.122509956 10.20.0.103 → 10.20.0.113 NFS 246 V4 Call GETATTR FH:
0x62d40c52
59 0.122608838 10.20.0.113 → 10.20.0.103 NFS 262 V4 Reply (Call In 58)
GETATTR
60 0.122898718 10.20.0.103 → 10.20.0.113 NFS 242 V4 Call GETATTR FH:
0x62d40c52
61 0.122979251 10.20.0.113 → 10.20.0.103 NFS 362 V4 Reply (Call In 60)
GETATTR
62 0.163994942 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=2641
Ack=2581 Win=64128 Len=0 TSval=288485392 TSecr=4183281093
63 0.347372974 10.20.0.103 → 10.20.0.113 TCP 74 48134 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=288485575 TSecr=0 WS=128
64 0.347394816 10.20.0.113 → 10.20.0.103 TCP 74 2049 → 48134 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=4183281317
TSecr=288485575 WS=1024
65 0.347522448 10.20.0.103 → 10.20.0.113 TCP 66 48134 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=288485575 TSecr=4183281317
66 0.349300335 10.20.0.103 → 10.20.0.113 NFS 766 V4 NULL Call
67 0.349322117 10.20.0.113 → 10.20.0.103 TCP 66 2049 → 48134 [ACK] Seq=1
Ack=701 Win=30720 Len=0 TSval=4183281319 TSecr=288485577
68 0.352389556 10.20.0.113 → 10.20.0.103 NFS 302 V4 NULL Reply (Call In 66)
69 0.352519308 10.20.0.103 → 10.20.0.113 TCP 66 48134 → 2049 [ACK]
Seq=701 Ack=237 Win=64128 Len=0 TSval=288485580 TSecr=4183281322
70 0.353518955 10.20.0.103 → 10.20.0.113 TCP 66 48134 → 2049 [FIN, ACK]
Seq=701 Ack=237 Win=64128 Len=0 TSval=288485581 TSecr=4183281322
71 0.353551799 10.20.0.113 → 10.20.0.103 TCP 66 2049 → 48134 [FIN, ACK]
Seq=237 Ack=702 Win=30720 Len=0 TSval=4183281323 TSecr=288485581
72 0.353610988 10.20.0.103 → 10.20.0.113 NFS 242 V4 Call GETATTR FH:
0x62d40c52
73 0.353695737 10.20.0.103 → 10.20.0.113 TCP 66 48134 → 2049 [ACK]
Seq=702 Ack=238 Win=64128 Len=0 TSval=288485582 TSecr=4183281323
74 0.354074734 10.20.0.113 → 10.20.0.103 NFS 258 V4 Reply (Call In 72)
GETATTR
75 0.354212715 10.20.0.103 → 10.20.0.113 TCP 66 918 → 2049 [ACK] Seq=2817
Ack=2773 Win=64128 Len=0 TSval=288485582 TSecr=4183281324


failed mount:

1 0.000000000 10.20.0.132 → 10.20.0.113 TCP 74 757 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608331 TSecr=0 WS=128
2 0.000034566 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 757 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470604
TSecr=2111608331 WS=1024
3 0.000188674 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608331 TSecr=1067470604
4 0.000227043 10.20.0.132 → 10.20.0.113 NFS 110 V4 NULL Call
5 0.000234928 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 757 [ACK] Seq=1
Ack=45 Win=29696 Len=0 TSval=1067470604 TSecr=2111608331
6 0.000276110 10.20.0.113 → 10.20.0.132 NFS 94 V4 NULL Reply (Call In 4)
7 0.000364879 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [ACK] Seq=45
Ack=29 Win=64256 Len=0 TSval=2111608331 TSecr=1067470604
8 0.004407799 10.20.0.132 → 10.20.0.113 TCP 74 55886 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608335 TSecr=0 WS=128
9 0.004431859 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55886 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470608
TSecr=2111608335 WS=1024
10 0.004578096 10.20.0.132 → 10.20.0.113 TCP 66 55886 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608335 TSecr=1067470608
11 0.024306358 10.20.0.132 → 10.20.0.113 TCP 66 55886 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608355 TSecr=1067470608
12 0.024346404 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55886 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470628 TSecr=2111608355
13 0.024462511 10.20.0.132 → 10.20.0.113 TCP 66 55886 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608355 TSecr=1067470628
14 0.026463202 10.20.0.132 → 10.20.0.113 TCP 74 55896 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608357 TSecr=0 WS=128
15 0.026487049 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55896 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470630
TSecr=2111608357 WS=1024
16 0.026618456 10.20.0.132 → 10.20.0.113 TCP 66 55896 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608357 TSecr=1067470630
17 0.044591811 10.20.0.132 → 10.20.0.113 TCP 66 55896 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608375 TSecr=1067470630
18 0.044620009 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55896 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470648 TSecr=2111608375
19 0.044758435 10.20.0.132 → 10.20.0.113 TCP 66 55896 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608376 TSecr=1067470648
20 0.047029160 10.20.0.132 → 10.20.0.113 TCP 74 55906 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608378 TSecr=0 WS=128
21 0.047052259 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55906 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470651
TSecr=2111608378 WS=1024
22 0.047159666 10.20.0.132 → 10.20.0.113 TCP 66 55906 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608378 TSecr=1067470651
23 0.065206164 10.20.0.132 → 10.20.0.113 TCP 66 55906 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608396 TSecr=1067470651
24 0.065244081 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55906 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470669 TSecr=2111608396
25 0.065354320 10.20.0.132 → 10.20.0.113 TCP 66 55906 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608396 TSecr=1067470669
26 0.067275748 10.20.0.132 → 10.20.0.113 TCP 74 55916 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608398 TSecr=0 WS=128
27 0.067299339 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55916 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470671
TSecr=2111608398 WS=1024
28 0.067426977 10.20.0.132 → 10.20.0.113 TCP 66 55916 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608398 TSecr=1067470671
29 0.084567216 10.20.0.132 → 10.20.0.113 TCP 66 55916 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608415 TSecr=1067470671
30 0.084605684 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55916 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470688 TSecr=2111608415
31 0.084699312 10.20.0.132 → 10.20.0.113 TCP 66 55916 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608415 TSecr=1067470688
32 0.086972359 10.20.0.132 → 10.20.0.113 TCP 74 55926 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608418 TSecr=0 WS=128
33 0.087000636 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55926 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470691
TSecr=2111608418 WS=1024
34 0.087115722 10.20.0.132 → 10.20.0.113 TCP 66 55926 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608418 TSecr=1067470691
35 0.105635643 10.20.0.132 → 10.20.0.113 TCP 66 55926 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608436 TSecr=1067470691
36 0.105671345 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55926 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470709 TSecr=2111608436
37 0.105865880 10.20.0.132 → 10.20.0.113 TCP 66 55926 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608437 TSecr=1067470709
38 0.107781881 10.20.0.132 → 10.20.0.113 TCP 74 55936 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608438 TSecr=0 WS=128
39 0.107805273 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55936 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470711
TSecr=2111608438 WS=1024
40 0.107928002 10.20.0.132 → 10.20.0.113 TCP 66 55936 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608439 TSecr=1067470711
41 0.130102926 10.20.0.132 → 10.20.0.113 TCP 66 55936 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608461 TSecr=1067470711
42 0.130142430 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55936 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470734 TSecr=2111608461
43 0.130273503 10.20.0.132 → 10.20.0.113 TCP 66 55936 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608461 TSecr=1067470734
44 0.132571585 10.20.0.132 → 10.20.0.113 TCP 74 55946 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608463 TSecr=0 WS=128
45 0.132594838 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55946 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470736
TSecr=2111608463 WS=1024
46 0.132765688 10.20.0.132 → 10.20.0.113 TCP 66 55946 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608463 TSecr=1067470736
47 0.153765722 10.20.0.132 → 10.20.0.113 TCP 66 55946 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608484 TSecr=1067470736
48 0.153805361 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55946 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470757 TSecr=2111608484
49 0.153985312 10.20.0.132 → 10.20.0.113 TCP 66 55946 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608485 TSecr=1067470757
50 0.156054965 10.20.0.132 → 10.20.0.113 TCP 74 55956 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608487 TSecr=0 WS=128
51 0.156070026 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55956 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470760
TSecr=2111608487 WS=1024
52 0.156226983 10.20.0.132 → 10.20.0.113 TCP 66 55956 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608487 TSecr=1067470760
53 0.174042237 10.20.0.132 → 10.20.0.113 TCP 66 55956 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608505 TSecr=1067470760
54 0.174081904 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55956 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470778 TSecr=2111608505
55 0.174187537 10.20.0.132 → 10.20.0.113 TCP 66 55956 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608505 TSecr=1067470778
56 0.174202386 10.20.0.132 → 10.20.0.113 NFS 326 V4 Call EXCHANGE_ID
57 0.174304438 10.20.0.113 → 10.20.0.132 NFS 202 V4 Reply (Call In 56)
EXCHANGE_ID
58 0.174394500 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [ACK] Seq=305
Ack=165 Win=64128 Len=0 TSval=2111608505 TSecr=1067470778
59 0.174549675 10.20.0.132 → 10.20.0.113 NFS 326 V4 Call EXCHANGE_ID
60 0.174709875 10.20.0.113 → 10.20.0.132 NFS 202 V4 Reply (Call In 59)
EXCHANGE_ID
61 0.174822405 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [ACK] Seq=565
Ack=301 Win=64128 Len=0 TSval=2111608506 TSecr=1067470778
62 0.174867417 10.20.0.132 → 10.20.0.113 NFS 290 V4 Call CREATE_SESSION
63 0.175088479 10.20.0.113 → 10.20.0.132 NFS 194 V4 Reply (Call In 62)
CREATE_SESSION
64 0.175276010 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [ACK] Seq=789
Ack=429 Win=64128 Len=0 TSval=2111608506 TSecr=1067470779
65 0.175357595 10.20.0.132 → 10.20.0.113 NFS 206 V4 Call RECLAIM_COMPLETE
66 0.175827084 10.20.0.113 → 10.20.0.132 NFS 158 V4 Reply (Call In 65)
RECLAIM_COMPLETE
67 0.175959260 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [ACK] Seq=929
Ack=521 Win=64128 Len=0 TSval=2111608507 TSecr=1067470779
68 0.178308430 10.20.0.132 → 10.20.0.113 TCP 74 55966 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608509 TSecr=0 WS=128
69 0.178324070 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55966 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470782
TSecr=2111608509 WS=1024
70 0.178439684 10.20.0.132 → 10.20.0.113 TCP 66 55966 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608509 TSecr=1067470782
71 0.194934259 10.20.0.132 → 10.20.0.113 TCP 66 55966 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608526 TSecr=1067470782
72 0.194973031 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55966 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470799 TSecr=2111608526
73 0.195098988 10.20.0.132 → 10.20.0.113 TCP 66 55966 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608526 TSecr=1067470799
74 0.197363286 10.20.0.132 → 10.20.0.113 TCP 74 55976 → 2049 [SYN] Seq=0
Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2111608528 TSecr=0 WS=128
75 0.197378774 10.20.0.113 → 10.20.0.132 TCP 74 2049 → 55976 [SYN, ACK]
Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 SACK_PERM=1 TSval=1067470801
TSecr=2111608528 WS=1024
76 0.197519084 10.20.0.132 → 10.20.0.113 TCP 66 55976 → 2049 [ACK] Seq=1
Ack=1 Win=64256 Len=0 TSval=2111608528 TSecr=1067470801
77 0.216559738 10.20.0.132 → 10.20.0.113 TCP 66 55976 → 2049 [FIN, ACK]
Seq=1 Ack=1 Win=64256 Len=0 TSval=2111608547 TSecr=1067470801
78 0.216585690 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 55976 [FIN, ACK]
Seq=1 Ack=2 Win=29696 Len=0 TSval=1067470820 TSecr=2111608547
79 0.216689905 10.20.0.132 → 10.20.0.113 TCP 66 55976 → 2049 [ACK] Seq=2
Ack=2 Win=64256 Len=0 TSval=2111608547 TSecr=1067470820
80 0.226054642 10.20.0.132 → 10.20.0.113 NFS 182 V4 Call DESTROY_SESSION
81 0.226207852 10.20.0.113 → 10.20.0.132 NFS 114 V4 Reply (Call In 80)
DESTROY_SESSION
82 0.226348228 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [ACK] Seq=1045
Ack=569 Win=64128 Len=0 TSval=2111608557 TSecr=1067470830
83 0.226468471 10.20.0.132 → 10.20.0.113 NFS 174 V4 Call DESTROY_CLIENTID
84 0.226830861 10.20.0.113 → 10.20.0.132 NFS 114 V4 Reply (Call In 83)
DESTROY_CLIENTID
85 0.226957045 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [ACK] Seq=1153
Ack=617 Win=64128 Len=0 TSval=2111608558 TSecr=1067470830
86 0.227914729 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [FIN, ACK]
Seq=1153 Ack=617 Win=64128 Len=0 TSval=2111608559 TSecr=1067470830
87 0.227930401 10.20.0.113 → 10.20.0.132 TCP 66 2049 → 757 [FIN, ACK]
Seq=617 Ack=1154 Win=33792 Len=0 TSval=1067470832 TSecr=2111608559
88 0.228030801 10.20.0.132 → 10.20.0.113 TCP 66 757 → 2049 [ACK] Seq=1154
Ack=618 Win=64128 Len=0 TSval=2111608559 TSecr=1067470832
89 5.302870038 Dell_06:24:31 → HewlettP_b2:5a:53 ARP 60 Who has
10.20.0.113? Tell 10.20.0.132
90 5.302881502 HewlettP_b2:5a:53 → Dell_06:24:31 ARP 42 10.20.0.113 is at
28:80:23:b2:5a:53


it doesn't seem like anything I've run into before. Any ideas?

- Orion

--
Orion Poplawski
Manager of NWRA Technical Systems 720-772-5637
NWRA, Boulder/CoRA Office FAX: 303-415-9702
3380 Mitchell Lane [email protected]
Boulder, CO 80301 https://www.nwra.com/



Attachments:
smime.p7s (3.71 kB)
S/MIME Cryptographic Signature

2019-08-04 20:14:40

by Daniel Kobras

[permalink] [raw]
Subject: Re: NFS issues

Hi!

Am 03.08.19 um 00:21 schrieb Orion Poplawski:
> I'm not able to mount a kerberos nfs share from a Ubuntu 18 machine on a
> Fedora 30 machine. Fedora 29 client works fine. I get a permission
> denied message.
The tshark output isn't verbose enough to tell for sure whether this is
the cause, but krb5 in Fedora 30 no longer supports various weak
encryption types. I'd recommend to double check the available enctypes
for your server's nfs principal. More details at:
https://fedoraproject.org/wiki/Changes/krb5_crypto_modernization

Kind regards,

Daniel
--
Daniel Kobras
Principal Architect
Puzzle ITC Deutschland
+49 7071 14316 0
http://www.puzzle-itc.de

--
Puzzle ITC Deutschland GmbH
Sitz der Gesellschaft: Jurastr. 27/1, 72072
Tübingen

Eingetragen am Amtsgericht Stuttgart HRB 765802
Geschäftsführer:
Lukas Kallies, Daniel Kobras, Mark Pröhl

2019-08-05 22:05:15

by Orion Poplawski

[permalink] [raw]
Subject: Re: NFS issues

On 8/4/19 2:03 PM, Daniel Kobras wrote:
> Hi!
>
> Am 03.08.19 um 00:21 schrieb Orion Poplawski:
>> I'm not able to mount a kerberos nfs share from a Ubuntu 18 machine on a
>> Fedora 30 machine. Fedora 29 client works fine. I get a permission
>> denied message.
> The tshark output isn't verbose enough to tell for sure whether this is
> the cause, but krb5 in Fedora 30 no longer supports various weak
> encryption types. I'd recommend to double check the available enctypes
> for your server's nfs principal. More details at:
> https://fedoraproject.org/wiki/Changes/krb5_crypto_modernization
>
> Kind regards,
>
> Daniel
>

Thanks for the response. Turns out to have be an incorrect FQDN in use on one
machine - the OS difference was a coincidence.

--
Orion Poplawski
Manager of NWRA Technical Systems 720-772-5637
NWRA, Boulder/CoRA Office FAX: 303-415-9702
3380 Mitchell Lane [email protected]
Boulder, CO 80301 https://www.nwra.com/


Attachments:
smime.p7s (3.71 kB)
S/MIME Cryptographic Signature