From: James Bardin Subject: Re: nfs sec=krb5 on RHEL and CentOS Date: Thu, 25 Jan 2007 16:56:09 -0500 Message-ID: <45B92779.3000202@bu.edu> References: <45B73D93.1020508@RedHat.com> <45B7C85C.80105@bu.edu> <20070124233908.GS6587@fieldses.org> <45B9084F.7090307@bu.edu> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Cc: kwc@citi.umich.edu To: nfs@lists.sourceforge.net Return-path: Received: from sc8-sf-mx2-b.sourceforge.net ([10.3.1.92] helo=mail.sourceforge.net) by sc8-sf-list2-new.sourceforge.net with esmtp (Exim 4.43) id 1HACZv-000050-7N for nfs@lists.sourceforge.net; Thu, 25 Jan 2007 13:56:19 -0800 Received: from wx-out-0506.google.com ([66.249.82.234]) by mail.sourceforge.net with esmtp (Exim 4.44) id 1HACZu-0005IA-Jl for nfs@lists.sourceforge.net; Thu, 25 Jan 2007 13:56:21 -0800 Received: by wx-out-0506.google.com with SMTP id i30so1041325wxd for ; Thu, 25 Jan 2007 13:56:12 -0800 (PST) In-Reply-To: <45B9084F.7090307@bu.edu> List-Id: "Discussion of NFS under Linux development, interoperability, and testing." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: nfs-bounces@lists.sourceforge.net Errors-To: nfs-bounces@lists.sourceforge.net > I'm almost there! > Between the nfs-utils patch, and the noacl option, I have my 32bit > systems working. (thanks Steve) > > On x86_64, I'm having kerberos problems (exact same config): > > rpc.gssd[4871]: handling krb5 upcall > rpc.gssd[4871]: getting credentials for client with uid xxxx for > server yyyy.bu.edu > rpc.gssd[4871]: CC file 'krb5cc_xxxx_bSULEy' being considered > rpc.gssd[4871]: CC file 'krb5cc_xxxx_bSULEy' matches name check and > has mtime of 1169750861 > rpc.gssd[4871]: using FILE:/tmp/krb5cc_xxxx_bSULEy as credentials > cache for client with uid xxxx for server yyyy.bu.edu > rpc.gssd[4871]: creating context using euid xxxx (save_uid 0) > rpc.gssd[4871]: creating tcp client for server yyyy.bu.edu > rpc.gssd[4871]: WARNING: can't create rpc_clnt for server > engna1.bu.edu for user with uid xxxx: RPC: Success rpc.gssd[4871]: > WARNING: Failed to create krb5 context for user with uid xxxx for > server yyyy.bu.edu > rpc.gssd[4871]: doing error downcall > > x86_64 is working on an older version, I read the errata, and it shouldn't effect us, but something is wrong in the new ones. This is with sec=krb5. nfs-utils-1.0.6-77 causes the above problems nfs-utils-1.0.6-70 will hang on rpc.gssd nfs-utils-1.0.6-65 is working. > Kevin Coffman wrote: > Unless Steve has pulled in more fixes than I think, you'll probably > need to upgrade libgssapi and maybe nfs-utils to get 64-bit working. > I was going to look at what is in nfs-utils-1.0.6-77, but my RHEL 4 > subscription has expired :-/. Working on that. > > Offhand, I don't recall exactly when those changes went in, but I'll > check. I'm trying to keep to the RHEL src tree as much as possible, this is going on a lot of machines. Do you know of a patch/update for libgssapi that I could try? thanks -jim ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ NFS maillist - NFS@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfs