2010/3/8 Lukas Hejtmanek <xhejtman@xxxxxxxxxxx>: > On Mon, Mar 08, 2010 at 02:21:57PM -0500, Kevin Coffman wrote: >> So you probably need to add "allow_weak_crypto = true" to your >> /etc/krb5.conf file. (I believe MIT added an API to allow this >> programmatically, but I haven't been following closely enough.) > > well, this one fixes problem with nfs-utils-1.2.0. > > The 1.2.2 still segfaults. Any other thoughts or should I start to play bisect > game? Interesting. Are there any extra Debian nfs-utils patches? I just tried this with vanilla nfs-utils-1.2.2 and the latest Kerberos (w/o the allow_weak_crypto config setting) and do not get a segfault. I get these error messages: Mar 8 14:40:18 jazz rpc.gssd[7925]: Full hostname for 'screamer.citi.umich.edu' is 'screamer.citi.umich.edu' Mar 8 14:40:18 jazz rpc.gssd[7925]: Full hostname for 'jazz.citi.umich.edu' is 'jazz.citi.umich.edu' Mar 8 14:40:18 jazz rpc.gssd[7925]: Key table entry not found while getting keytab entry for 'root/jazz.citi.umich.edu@' Mar 8 14:40:18 jazz rpc.gssd[7925]: Success getting keytab entry for 'nfs/jazz.citi.umich.edu@' Mar 8 14:40:18 jazz rpc.gssd[7925]: INFO: Credentials in CC 'FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU' are good until 1268437187 Mar 8 14:40:18 jazz rpc.gssd[7925]: INFO: Credentials in CC 'FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU' are good until 1268437187 Mar 8 14:40:18 jazz rpc.gssd[7925]: using FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU as credentials cache for machine creds Mar 8 14:40:18 jazz rpc.gssd[7925]: using environment variable to select krb5 ccache FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU Mar 8 14:40:18 jazz rpc.gssd[7925]: creating context using fsuid 0 (save_uid 0) Mar 8 14:40:18 jazz rpc.gssd[7925]: creating tcp client for server screamer.citi.umich.edu Mar 8 14:40:18 jazz rpc.gssd[7925]: DEBUG: port already set to 2049 Mar 8 14:40:18 jazz rpc.gssd[7925]: creating context with server nfs@xxxxxxxxxxxxxxxxxxxxxxx Mar 8 14:40:18 jazz rpc.gssd[7925]: WARNING: Failed to create krb5 context for user with uid 0 for server screamer.citi.umich.edu Mar 8 14:40:18 jazz rpc.gssd[7925]: WARNING: Failed to create machine krb5 context with credentials cache FILE:/tmp/krb5cc_machine_CITI.UMICH.EDU for server screamer.citi.umich.edu Mar 8 14:40:18 jazz rpc.gssd[7925]: WARNING: Failed to create machine krb5 context with any credentials cache for server screamer.citi.umich.edu Mar 8 14:40:18 jazz rpc.gssd[7925]: doing error downcall Mar 8 14:40:18 jazz rpc.gssd[7925]: Failed to write error downcall! Mar 8 14:40:18 jazz rpc.gssd[7925]: destroying client /var/lib/nfs/rpc_pipefs/nfs/clnta Mar 8 14:40:18 jazz rpc.gssd[7925]: destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt9 Running rpc.gssd with no debugging, I get: Mar 8 14:47:02 jazz rpc.gssd[8006]: ERROR: No credentials found for connection to server screamer.citi.umich.edu -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
