Bug 146703 - NLM (NFSv3) problems when mounting with "sec=krb5"
NLM (NFSv3) problems when mounting with "sec=krb5"
Product: Fedora
Classification: Fedora
Component: kernel (Show other bugs)
All Linux
medium Severity medium
: ---
: ---
Assigned To: Dave Jones
Brian Brock
Depends On:
  Show dependency treegraph
Reported: 2005-01-31 16:06 EST by Chuck Lever
Modified: 2015-01-04 17:16 EST (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2005-02-02 16:45:33 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Allow NLM to work when mounting with sec=krb5 option (3.09 KB, patch)
2005-01-31 16:10 EST, Chuck Lever
no flags Details | Diff

  None (edit)
Description Chuck Lever 2005-01-31 16:06:28 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5)
Gecko/20041111 Firefox/1.0

Description of problem:
When mounting an NFS server with NFS version 3 and Kerberos security,
a variety of bad things happen when any application tries to lock or
unlock files on sec=krb5 mounts, such as application hangs and kernel

The problem is that kernel NLM tries to use a GSS credential when it
should be using an AUTH_SYS credential.

Note this is also a problem for RHEL 4.0.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. Mount a NetApp filer with the sec=krb5 option
2. kinit yourself
3. Run the Connectathon locking tests on that mount    

Actual Results:  Kernel oops or application hangs (sorry, i don't have
the oops output
any more, but you should be able to reproduce some misbehavior using
the steps listed above).

Expected Results:  Connectathon tests should pass with only one warning.

Additional info:

I'll attach a patch that Trond created for 2.6.11-rc2 that fixes this
Comment 1 Chuck Lever 2005-01-31 16:10:59 EST
Created attachment 110459 [details]
Allow NLM to work when mounting with sec=krb5 option

This is an equivalent patch to Trond's linux-2.6.11-13-fixup_nlm_auth.dif.
Comment 2 Dave Jones 2005-02-02 00:00:18 EST
fixed in cvs, will be in the next kernel

thanks Chuck.
Comment 3 Steve Dickson 2005-05-26 21:52:34 EDT
Kernels with the fix in them are in:

If possible be give them try to ensure the problem is fixed.

Note You need to log in before you can comment on or make changes to this bug.