--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: nfs-common: rpc.gssd crashes when performing nfs4 mount
- From: Ben Rawson <ben.rawson@boeing.com>
- Date: Mon, 15 Apr 2013 17:42:55 -0400
- Message-id: <20130415214255.30464.22142.reportbug@zephyr.exmeritus.com>
Package: nfs-common
Version: 1:1.2.6-3
Severity: normal
Mounting a kerberos-protected nfs4 export is unsuccsessfull on powerpcspe. nfs-common initializes without error, and rpc.gssd appears to be running. Upon a mount attempt, the following error message was displayed:
mount: fstab path: "/etc/fstab"
mount: mtab path: "/etc/mtab"
mount: lock path: "/etc/mtab~"
mount: temp path: "/etc/mtab.tmp"
mount: UID: 0
mount: eUID: 0
mount: spec: "nfsserver:/home/yesterday"
mount: node: "/home"
mount: types: "nfs4"
mount: opts: "noatime,sec=krb5"
mount: external mount: argv[0] = "/sbin/mount.nfs4"
mount: external mount: argv[1] = "nfsserver:/home/yesterday"
mount: external mount: argv[2] = "/home"
mount: external mount: argv[3] = "-v"
mount: external mount: argv[4] = "-o"
mount: external mount: argv[5] = "rw,noatime,sec=krb5"
mount.nfs4: timeout set for Mon Apr 15 17:35:12 2013
mount.nfs4: trying text-based options
'sec=krb5,addr=192.168.1.2,clientaddr=192.168.1.3'
mount.nfs4: mount(2): Broken pipe
mount.nfs4: Broken pipe
After this message, rpc.gssd is no longer running. Further mount
attempts timeout with the following:
mount: fstab path: "/etc/fstab"
mount: mtab path: "/etc/mtab"
mount: lock path: "/etc/mtab~"
mount: temp path: "/etc/mtab.tmp"
mount: UID: 0
mount: eUID: 0
mount: spec: "titansteel:/home/yesterday"
mount: node: "/home"
mount: types: "nfs4"
mount: opts: "noatime,sec=krb5"
mount: external mount: argv[0] = "/sbin/mount.nfs4"
mount: external mount: argv[1] = "titansteel:/home/yesterday"
mount: external mount: argv[2] = "/home"
mount: external mount: argv[3] = "-v"
mount: external mount: argv[4] = "-o"
mount: external mount: argv[5] = "rw,noatime,sec=krb5"
mount.nfs4: timeout set for Mon Apr 15 17:37:21 2013
mount.nfs4: trying text-based options
'sec=krb5,addr=192.168.1.2,clientaddr=192.168.1.3'
mount.nfs4: mount(2): Permission denied
mount.nfs4: access denied by server while mounting
nfsserver:/home/yesterday
A gdb trace of rpc.gssd reveals the following:
Program received signal SIGSEGV, Segmentation fault.
0x0ffd9154 in __gss_get_mechanism_cred ()
from /lib/powerpc-linux-gnuspe/libtirpc.so.1
(gdb) where
#0 0x0ffd9154 in __gss_get_mechanism_cred ()
from /lib/powerpc-linux-gnuspe/libtirpc.so.1
#1 0x0ffd845c in gss_add_cred () from
/lib/powerpc-linux-gnuspe/libtirpc.so.1
#2 0x0fb4dc38 in gss_acquire_cred (minor_status=0xbfc5f2fc,
desired_name=0x0,
time_req=0, desired_mechs=<optimized out>, cred_usage=1,
output_cred_handle=0xbfc5f1f4, actual_mechs=0x0,
time_rec=0xbfc5f1ec)
at ../../../../src/lib/gssapi/mechglue/g_acquire_cred.c:152
#3 0x0ffd8588 in gss_add_cred () from
/lib/powerpc-linux-gnuspe/libtirpc.so.1
#4 0x0ffd8af8 in gss_acquire_cred ()
from /lib/powerpc-linux-gnuspe/libtirpc.so.1
#5 0x10007b90 in ?? ()
#6 0x10004e04 in ?? ()
#7 0x100054d0 in ?? ()
#8 0x10005d14 in ?? ()
#9 0x10003b6c in ?? ()
#10 0x10002590 in ?? ()
#11 0x0fcaadcc in generic_start_main (main=<optimized out>,
argc=<optimized out>, ubp_av=<optimized out>, auxvec=<optimized
out>,
init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized
out>,
stack_end=<optimized out>) at ../csu/libc-start.c:228
#12 0x0fcaaf84 in __libc_start_main (
argc=<error reading variable: value has been optimized out>,
ubp_av=<error reading variable: value has been optimized out>,
ubp_ev=<optimized out>,
auxvec=<error reading variable: value has been optimized out>,
rtld_fini=<error reading variable: value has been optimized out>,
stinfo=<optimized out>,
stack_on_entry=<error reading variable: value has been optimized
out>)
at ../sysdeps/unix/sysv/linux/powerpc/libc-start.c:105
#13 0x00000000 in ?? ()
(gdb)
I have not verified this as a problem with the same package versions on
any other architecture, but I suspect this is an architecture specific
problem.
-- Package-specific info:
-- rpcinfo --
program vers proto port service
100000 4 tcp 111 portmapper
100000 3 tcp 111 portmapper
100000 2 tcp 111 portmapper
100000 4 udp 111 portmapper
100000 3 udp 111 portmapper
100000 2 udp 111 portmapper
100024 1 udp 4000 status
100024 1 tcp 4000 status
100003 2 tcp 2049 nfs
100003 3 tcp 2049 nfs
100003 4 tcp 2049 nfs
100227 2 tcp 2049
100227 3 tcp 2049
100003 2 udp 2049 nfs
100003 3 udp 2049 nfs
100003 4 udp 2049 nfs
100227 2 udp 2049
100227 3 udp 2049
100021 1 udp 45924 nlockmgr
100021 3 udp 45924 nlockmgr
100021 4 udp 45924 nlockmgr
100021 1 tcp 46132 nlockmgr
100021 3 tcp 46132 nlockmgr
100021 4 tcp 46132 nlockmgr
-- /etc/default/nfs-common --
NEED_STATD=
STATDOPTS="--port 4000 --outgoing-port 4001"
NEED_IDMAPD=yes
NEED_GSSD=yes
RPCGSSDOPTS="-vvvrrr"
-- /etc/idmapd.conf --
[General]
Verbosity = 0
Pipefs-Directory = /var/lib/nfs/rpc_pipefs
Domain = exmeritus.com
Local-Realm = EXMERITUS.COM
[Mapping]
Nobody-User = nobody
Nobody-Group = nogroup
-- /etc/fstab --
nfsserver:/home /home nfs4 noatime,sec=krb5 0 2
-- /proc/mounts --
rpc_pipefs /var/lib/nfs/rpc_pipefs rpc_pipefs rw,relatime 0 0
nfsd /proc/fs/nfsd nfsd rw,relatime 0 0
-- System Information:
Debian Release: 7.0
APT prefers unreleased
APT policy: (500, 'unreleased'), (500, 'unstable')
Architecture: powerpcspe (ppc)
Kernel: Linux 3.2.0bareboard (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Versions of packages nfs-common depends on:
ii adduser 3.113+nmu3
ii initscripts 2.88dsf-41
ii libc6 2.13-38
ii libcap2 1:2.22-1.2
ii libcomerr2 1.42.5-1.1
ii libdevmapper1.02.1 2:1.02.77-1
ii libevent-2.0-5 2.0.19-stable-3
ii libgssglue1 0.4-2
ii libk5crypto3 1.10.1+dfsg-5
ii libkeyutils1 1.5.5-7
ii libkrb5-3 1.10.1+dfsg-5
ii libmount1 2.20.1-5.3
ii libnfsidmap2 0.25-4
ii libtirpc1 0.2.2-5
ii libwrap0 7.6.q-24
ii lsb-base 4.1+Debian9
ii rpcbind 0.2.0-8
ii ucf 3.0025+nmu3
Versions of packages nfs-common recommends:
ii python 2.7.3-4
Versions of packages nfs-common suggests:
pn open-iscsi <none>
pn watchdog <none>
Versions of packages nfs-kernel-server depends on:
ii libblkid1 2.20.1-5.3
ii libc6 2.13-38
ii libtirpc1 0.2.2-5
ii libwrap0 7.6.q-24
ii lsb-base 4.1+Debian9
ii ucf 3.0025+nmu3
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: nfs-utils
Source-Version: 1:1.2.8-3
We believe that the bug you reported is fixed in the latest version of
nfs-utils, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 707960@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Steve Langasek <vorlon@debian.org> (supplier of updated nfs-utils package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 31 May 2013 17:59:53 -0700
Source: nfs-utils
Binary: nfs-kernel-server nfs-common
Architecture: source amd64
Version: 1:1.2.8-3
Distribution: unstable
Urgency: low
Maintainer: Debian kernel team <debian-kernel@lists.debian.org>
Changed-By: Steve Langasek <vorlon@debian.org>
Description:
nfs-common - NFS support files common to client and server
nfs-kernel-server - support for NFS kernel server
Closes: 707960
Changes:
nfs-utils (1:1.2.8-3) unstable; urgency=low
.
* Add myself as comaintainer, per <518FCECE.7050106@debian.org>.
* Build --with-libgssglue, which was the default prior to 1.2.8; this
fixes a regression that makes rpc.gssd (and hence, all
Kerberos-authenticated mounts) completely useless, because objects are
being incorrectly passed between multiple gss implementations (by way of
libtirpc). Closes: #707960.
Checksums-Sha1:
a5e816978271e8017e3a0686d9dc1d62d36193e8 2299 nfs-utils_1.2.8-3.dsc
2f3061ea5113f629356e5380305cf7a7f4b9594a 38222 nfs-utils_1.2.8-3.debian.tar.bz2
d4ab41f87745802c95fcf7211e0d78bfa770c14b 144894 nfs-kernel-server_1.2.8-3_amd64.deb
9e8bad1822d988d3b61109bc9b1cfe38e337f1a6 273982 nfs-common_1.2.8-3_amd64.deb
Checksums-Sha256:
054a091d404cef6af5bc2ac80f30870817e960ec1c2533984cc1b39333441c49 2299 nfs-utils_1.2.8-3.dsc
c7292742c21800a5522b5e265cc988046df29758d8314b79038bd3076b95cd97 38222 nfs-utils_1.2.8-3.debian.tar.bz2
508c876da8b3b324bdaf0c3b32d287c42ddb7f6af93e3cab0eb37b97136f6444 144894 nfs-kernel-server_1.2.8-3_amd64.deb
215824d11cc2f3e8b62ce73e806fa70d76df31591f19998fd1e90d8fee5235bb 273982 nfs-common_1.2.8-3_amd64.deb
Files:
6a81888253ea763f929907e32c27d1a6 2299 net standard nfs-utils_1.2.8-3.dsc
4cc152a8f11870c017c0edf07aacd8d4 38222 net standard nfs-utils_1.2.8-3.debian.tar.bz2
c40a7b71ccb96589a489dbc724edcd58 144894 net optional nfs-kernel-server_1.2.8-3_amd64.deb
2fb343f5d8dcc4ad8d741da403a8470f 273982 net standard nfs-common_1.2.8-3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=VpjM
-----END PGP SIGNATURE-----
--- End Message ---