Bug#604891: rpc.gssd: Failed to create machine krb5 context with any credentials cache
Package: nfs-common
Version: 1:1.2.2-4
Severity: normal
I mount a NFS4-Share with krb5p and automounter. After some time the client refuses
the mount. The rpc.gssd complains:
rpc.gssd[12224]: in authgss_create()
rpc.gssd[12224]: in authgss_refresh()
rpc.gssd[12224]: in authgss_marshal()
rpc.gssd[12224]: xdr_rpc_gss_cred: encode success (v 1, proc 1, seq 0, svc 1, ctx (nil):0)
rpc.gssd[12224]: xdr_rpc_gss_init_args: encode success (token 0x1e667e0:542)
rpc.gssd[12224]: in authgss_validate()
rpc.gssd[12224]: xdr_rpc_gss_init_res decode success (ctx (nil):0, maj 851968, min -1765328347, win 128, token (nil):0)
rpc.gssd[10927]: WARNING: Failed to create machine krb5 context with any credentials cache for server reliant.lab.swapon.de
Which is not true:
$ date
Thu Nov 25 06:54:40 CET 2010
$ sudo klist -c /tmp/krb5cc_machine_LAB.SWAPON.DE
Credentials cache: FILE:/tmp/krb5cc_machine_LAB.SWAPON.DE
Principal: nfs/phoenix.lab.swapon.de@LAB.SWAPON.DE
Issued Expires Principal
Nov 24 20:18:54 Nov 25 20:13:54 krbtgt/LAB.SWAPON.DE@LAB.SWAPON.DE
Nov 24 20:18:54 Nov 25 20:13:54 nfs/reliant.lab.swapon.de@LAB.SWAPON.DE
When I restart the rpc.gssd, everything works well again.
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages nfs-common depends on:
ii adduser 3.112 add and remove users and groups
ii initscripts 2.88dsf-12 scripts for initializing and shutt
ii libc6 2.11.2-7 Embedded GNU C Library: Shared lib
ii libcap2 1:2.19-3 support for getting/setting POSIX.
ii libcomerr2 1.41.12-2 common error description library
ii libevent-1.4-2 1.4.13-stable-1 An asynchronous event notification
ii libgssapi-krb5-2 1.8.3+dfsg-2 MIT Kerberos runtime libraries - k
ii libgssglue1 0.1-4 mechanism-switch gssapi library
ii libk5crypto3 1.8.3+dfsg-2 MIT Kerberos runtime libraries - C
ii libkrb5-3 1.8.3+dfsg-2 MIT Kerberos runtime libraries
ii libnfsidmap2 0.23-2 An nfs idmapping library
ii librpcsecgss3 0.19-2 allows secure rpc communication us
ii libwrap0 7.6.q-19 Wietse Venema's TCP wrappers libra
ii lsb-base 3.2-23.1 Linux Standard Base 3.2 init scrip
ii netbase 4.43 Basic TCP/IP networking system
ii portmap 6.0.0-2 RPC port mapper
ii ucf 3.0025+nmu1 Update Configuration File: preserv
nfs-common recommends no packages.
nfs-common suggests no packages.
-- no debconf information
Reply to: