FS#35327 - [nfs-utils] NFS4-with-Kerberos client stopped mounting

Attached to Project: Arch Linux
Opened by Bill Gardner (Cassino) - Thursday, 16 May 2013, 15:46 GMT
Last edited by Tobias Powalowski (tpowa) - Monday, 17 June 2013, 15:44 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Tobias Powalowski (tpowa)
Tom Gundersen (tomegun)
Architecture x86_64
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description:
rpc-gssd.service crashes in libgssglue, results in service failing and "access denied by server" mount error

Looking in the journal found this:
kernel: rpc.gssd[11749]: segfault at 1 ip 00007f036db91d75 sp 00007fffbb5b9df0 error 4 in libgssglue.so.1.0.0[7f036db8e000+9000]
systemd[1]: rpc-gssd.service: main process exited, code=dumped, status=11/SEGV
systemd[1]: Unit rpc-gssd.service entered failed state.
systemd-coredump[11764]: Process 11749 (rpc.gssd) dumped core.

Downgrading 3 packages (all updated on May-10-2013) restores normal operation:
- nfs-utils to 1.2.7-1
- libtirpc to 0.2.2-4
- rpcbind to 0.2.0-8

Additional info:
* package version(s)
- nfs-utils 1.2.8-3
- libtirpc 0.2.3-1
- rpcbind 0.2.0-11

Steps to reproduce:
1. do "kinit" to get Kerberos credential
2. "mount" will give error
This task depends upon

Closed by  Tobias Powalowski (tpowa)
Monday, 17 June 2013, 15:44 GMT
Reason for closing:  Fixed
Additional comments about closing:  1.2.8-8
Comment by Bill Gardner (Cassino) - Wednesday, 22 May 2013, 00:07 GMT
Today applied recent upgrade of krb5 (1.11.2-1 => 1.11.2-3) and "mount" broke again, this time with rpc.gssd "unable to resolve" NFS server. After downgrading to 1.11.2-1, mount worked correctly.
Comment by Bill Gardner (Cassino) - Friday, 31 May 2013, 14:09 GMT
Today noticed that nfs-utils and rpcbind were both updated. Did full upgrade, now using:

krb5-1.11.2-4 libtirpc-0.2.3-1 nfs-utils-1.2.8-6 rpcbind-0.2.0-12

The original problem persists; journal entries:

May 31 09:57:56 carmel kernel: NFS: Registering the id_resolver key type
May 31 09:57:56 carmel kernel: Key type id_resolver registered
May 31 09:57:56 carmel kernel: Key type id_legacy registered
May 31 09:57:56 carmel kernel: rpc.gssd[499]: segfault at 1 ip 00007ffa8733fb05 sp 00007fff8cbe5010 error 4 in libgssglue.so.1.0.0[7ffa8733c000+9000]
May 31 09:57:56 carmel systemd[1]: rpc-gssd.service: main process exited, code=dumped, status=11/SEGV
May 31 09:57:56 carmel systemd[1]: Unit rpc-gssd.service entered failed state.
May 31 09:57:56 carmel systemd-coredump[1034]: Process 499 (rpc.gssd) dumped core.
Comment by Sijmen Woutersen (sijmen.woutersen) - Monday, 17 June 2013, 11:04 GMT
Adding '--with-gssglue' to the configure line fixes this (at my site), see; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707960

Loading...