Return-Path: Received: from vergina.eng.auth.gr ([155.207.18.1]:61634 "EHLO vergina.eng.auth.gr" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755784Ab0ITJrp (ORCPT ); Mon, 20 Sep 2010 05:47:45 -0400 Message-ID: <4C972DB3.2050405@eng.auth.gr> Date: Mon, 20 Sep 2010 12:47:31 +0300 From: George Mamalakis To: "J. Bruce Fields" CC: linux-nfs@vger.kernel.org Subject: Re: nfsv3 gssapi client? References: <4C938F3B.4030604@eng.auth.gr> <20100917174328.GC25515@fieldses.org> In-Reply-To: <20100917174328.GC25515@fieldses.org> Content-Type: text/plain; charset=UTF-8; format=flowed Sender: linux-nfs-owner@vger.kernel.org List-ID: MIME-Version: 1.0 Hi Bruce and thanx for the reply, to your questions now: On 17/09/2010 20:43, J. Bruce Fields wrote: > >> # mount -t nfs -o sec=krb5 fbsdserver:/exports /mnt >> > Was there supposed to be some error output there? Or did the mount just > hang? > The mount command stalls and no output is presented; only the messages on /var/log/messages. >> Sep 17 16:06:01 linuxclient kernel: svc: failed to register lockdv1 >> RPC service (errno 111). > 111 is ECONNREFUSED. I'm not sure why that's failing. (Should failure > to register lockd fail the whole mount? I thought it would at worst > result in ENOLCK on lock requests?) Do you get better results if you > mount with nolock? > Now this is peculiar. If run mount -o nolock then gssd segfaults. This is because it creates a /tmp/krb5cc_machine_REALM ticket, and when it access it, it segfaults. To overcome this issue I deleted the temporary file, and ran gssd manually to see its output. So, mount returned the following: [root@linuxclient ~]# mount -t nfs -o sec=krb5,nolock fbsdserver:/exports /mnt mount.nfs: access denied by server while mounting fbsdserver:/exports and gssd console output read: destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt110 handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt112) handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 ' handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt112) process_krb5_upcall: service is '' getting credentials for client with uid 0 for server fbsdserver WARNING: Failed to create krb5 context for user with uid 0 for server fbsdserver doing error downcall destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt113 handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt112) handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 ' handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt112) process_krb5_upcall: service is '' getting credentials for client with uid 0 for server fbsdserver WARNING: Failed to create krb5 context for user with uid 0 for server fbsdserver doing error downcall handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt112) handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 ' handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt112) process_krb5_upcall: service is '' getting credentials for client with uid 0 for server fbsdclient.ee.auth.gr WARNING: Failed to create krb5 context for user with uid 0 for server fbsdserver doing error downcall destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt112 destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt111 /var/log/messages shows nothing. I think that's all regarding your questions. Thanx again, mamalos. -- George Mamalakis IT Officer Electrical and Computer Engineer (Aristotle Un. of Thessaloniki), MSc (Imperial College of London) Department of Electrical and Computer Engineering Faculty of Engineering Aristotle University of Thessaloniki phone number : +30 (2310) 994379