Bug#637660: nfs-kernel-server: gss_accept_sec_context failed - Encryption type not permitted
Package: nfs-kernel-server
Version: 1.2.4-1
Severity: normal
PROBLEM
=========
Unable to mount NFS4 on the client
SIMILAR ISSUE REPORTED
================
https://bugzilla.redhat.com/show_bug.cgi?format=multiple&id=719776
ENVIROMENT
===========
NFS4 host= maverick
------------------------------
Debian Wheezy (Squeeze tested with same result)
maverick:~# klist -ke /etc/krb5.keytab
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
4 nfs/maverick.firm.local@FIRM.LOCAL (des3-cbc-sha1)
4 nfs/maverick.firm.local@FIRM.LOCAL (des-cbc-crc)
Client host = knightrider
-----------------------------------
Debian Sid
root@knightrider:~# klist -ke /etc/krb5.keytab
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
6 nfs/knightrider.firm.local@FIRM.LOCAL (des-cbc-crc)
LOG
===========
knightrider
------------------------------------
root@knightrider:~# rpc.gssd -fvvv
beginning poll
dir_notify_handler: sig 37 si 0x7fff73804430 data 0x7fff73804300
dir_notify_handler: sig 37 si 0x7fff73804330 data 0x7fff73804200
dir_notify_handler: sig 37 si 0x7fff738042f0 data 0x7fff738041c0
dir_notify_handler: sig 37 si 0x7fff737ffd70 data 0x7fff737ffc40
dir_notify_handler: sig 37 si 0x7fff73804430 data 0x7fff73804300
dir_notify_handler: sig 37 si 0x7fff73804430 data 0x7fff73804300
dir_notify_handler: sig 37 si 0x7fff73804430 data 0x7fff73804300
dir_notify_handler: sig 37 si 0x7fff73804430 data 0x7fff73804300
dir_notify_handler: sig 37 si 0x7fff73804430 data 0x7fff73804300
dir_notify_handler: sig 37 si 0x7fff73804430 data 0x7fff73804300
dir_notify_handler: sig 37 si 0x7fff73804430 data 0x7fff73804300
dir_notify_handler: sig 37 si 0x7fff73804430 data 0x7fff73804300
destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt34
destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt33
^Cexiting on signal 2
maverick
------------------------------------------
maverick:/home/ganomi/# rpc.svcgssd -fvvv
entering poll
leaving poll
handling null request
WARNING: gss_accept_sec_context failed
ERROR: GSS-API: error in handle_nullreq: gss_accept_sec_context():
GSS_S_FAILURE (Unspecified GSS failure. Minor code may provide more
information) - Encryption type not permitted
sending null reply
writing message: \x
\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
c6f316f2a4592c29f044f8cc27292beda4e83bd1c9ebc91d7ebb6ef5885b14a0a9628d185d36d24b56b691f5ff50731d0796713ebc04d6d88c84d8c8933066da0b9150cf6e60413bba9af0c2b9b00f435f92189763b257015d360c9a38d5011f542cafc5d2faf0fd23f0a6032c3dfbf1e74e7a06c8c58338b3c8c46b9229624e744258c3341e1f707544f0b5bfe20501bfbb5fa8a107d18c6d8d3697acc8020e6ccd268ec3d71b9d61d83375d02fd06f12444d56bf256d1c07f7af6948ca224efd1a3b498d680c4204da846cd7
1313243341 851968 2529639148 \x \x
finished handling null request
entering poll
leaving poll
handling null request
WARNING: gss_accept_sec_context failed
ERROR: GSS-API: error in handle_nullreq: gss_accept_sec_context():
GSS_S_FAILURE (Unspecified GSS failure. Minor code may provide more
information) - Encryption type not permitted
sending null reply
writing message: \x
\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
c6af5fe6eb7f750181bff12820ab063474bb62bc653e2e956987e44e1035962002af3eb6b86cf04324d206487b779d4bbfb64a0d1be01bce0fc6171eea0deae6f6cd40a28b8958d2f99e9f6246c68d7c7402ff4bc795cd5668749ab8bdaaa84c33d4a6778fe6a00e8b7c5b8c30744883a73867c83a77dcc24a3535c8255256bdfdbc10ed02f8238ef361499244098e3ad9ac5cc3b7963021d4845f555c625770e1ee158ced6b8f40cb6afde07217afdafc70657213fb89bd301eda76f50aac9ab1588a842c6a9d3ee0af9979a2
1313243341 851968 2529639148 \x \x
finished handling null request
entering poll
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.0.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Reply to: