Bug 218992
Summary: | Unable to access NFS4/KRB5 | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 5 | Reporter: | Matthew Booth <mbooth> |
Component: | nfs-utils | Assignee: | Steve Dickson <steved> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Ben Levenson <benl> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 5.0 | ||
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2010-09-20 11:04:35 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 218720 | ||
Bug Blocks: |
Description
Matthew Booth
2006-12-08 22:25:29 UTC
José Plans did some debugging on this. I did the following: echo 65535 > /proc/sys/sunrpc/nfs_debug echo 32767 > /proc/sys/sunrpc/rpc_debug and tried to access the mount again. There was a great deal of output, but José mentioned the following as being particularly significant: Dec 14 10:41:24 mbooth kernel: RPC: creating GSS authenticator for client dd4a6e00 Dec 14 10:41:24 mbooth kernel: net/sunrpc/rpc_pipe.c: rpc_lookup_parent failed to find path /nfs/clnt4/krb5 Dec 14 10:41:24 mbooth kernel: nfs_init_server_rpcclient: couldn't create credcache! There is a know problem with the RHEL4 svcgssd daemon... please try RHEL5 to RHEL5... something I was able to get working... Note that although the server is mostly RHEL 4, I upgraded everything nfs and kerberos related to get this working. nfs-utils on the server is nfs-utils-1.0.9-5. On my RHEL 5 laptop it's nfs-utils-1.0.9-10. Also note that this is a working configuration. I access this server regularly. José Plans suggested this might be related to available ciphers in the kernel. Is that a possibility? Unfortunately I don't have spare hardware to test a RHEL5 server. yes... the only cipher that is supported is DES... so can I close this bug? Not really, as this would be a regression. I'm still using a standard RHEL 4 kernel. This should be fixed in nfs-utils-1.0.6-76 Steve, nfs-utils on the RHEL 4 server is nfs-utils-1.0.9-5. nfs-utils on the RHEL 5 client is nfs-utils-1.0.9-10.el5.i386. These are both higher than nfs-utils-1.0.6-76. Is it nfs-utils or the kernel which doesn't support the required ciphers? oops... Please disreguard Comment #7 since nfs-utils-1.0.6-76 is the rhel4 nfs-utils... which does fix a problem with secure mounts... > nfs-utils on the RHEL 4 server is nfs-utils-1.0.9-5.... no... that more of a early RHEL5 or FC-6 version... Note, using nfs-utils-1.0.6-76 on the RHEL4 and nfs-utils-1.0.9-16.el5 on the RHEL5 side, I was able to get secure mounts working... I'm going close this since I am able to get secure mounts working in the latest RHEL5 update. |