Bug#756812: nfs-common: rpc.gssd crashes while mounting an encrypted nfs4 filesystem
Package: nfs-common
Version: 1:1.2.8-6
Severity: serious
Hello,
rpc.gssd started crashing again when mounting an encrypted nfs4
filesystem.
The dmesg contains:
[ 391.284130] rpc.gssd[1756]: segfault at b5a ip 00007f70bb3d772f sp 00007fff5765a080 error 4 in libgssapi_krb5.so.2.2[7f70bb3c4000+45000]
[ 391.284935] NFS: nfs4_discover_server_trunking unhandled error -32. Exiting with error EIO
The output from the rpc.gssd and gdb follows:
handling gssd upcall (/run/rpc_pipefs/nfs/clnte)
handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
handling krb5 upcall (/run/rpc_pipefs/nfs/clnte)
process_krb5_upcall: service is '*'
Full hostname for 'thor.kazna.de' is 'thor.kazna.de'
Full hostname for 'loki.local' is 'loki.local'
No key table entry found for LOKI$@KAZNA.DE while getting keytab entry for 'LOKI$@KAZNA.DE'
No key table entry found for root/loki.local@KAZNA.DE while getting keytab entry for 'root/loki.local@KAZNA.DE'
No key table entry found for nfs/loki.local@KAZNA.DE while getting keytab entry for 'nfs/loki.local@KAZNA.DE'
No key table entry found for host/loki.local@KAZNA.DE while getting keytab entry for 'host/loki.local@KAZNA.DE'
Processing keytab entry for principal 'nfs/loki.kazna.de@KAZNA.DE'
We will NOT use this entry (nfs/loki.kazna.de@KAZNA.DE)
Processing keytab entry for principal 'nfs/loki.kazna.de@KAZNA.DE'
We will NOT use this entry (nfs/loki.kazna.de@KAZNA.DE)
Processing keytab entry for principal 'nfs/loki.kazna.de@KAZNA.DE'
We will NOT use this entry (nfs/loki.kazna.de@KAZNA.DE)
Processing keytab entry for principal 'nfs/loki.kazna.de@KAZNA.DE'
We will NOT use this entry (nfs/loki.kazna.de@KAZNA.DE)
Processing keytab entry for principal 'nfs/loki.kazna.de@KAZNA.DE'
We WILL use this entry (nfs/loki.kazna.de@KAZNA.DE)
Success getting keytab entry for nfs/*@KAZNA.DE
Successfully obtained machine credentials for principal 'nfs/loki.kazna.de@KAZNA.DE' stored in ccache 'FILE:/tmp/krb5ccmachine_KAZNA.DE'
INFO: Credentials in CC 'FILE:/tmp/krb5ccmachine_KAZNA.DE' are good until 1406965169
using FILE:/tmp/krb5ccmachine_KAZNA.DE as credentials cache for machine creds
using environment variable to select krb5 ccache FILE:/tmp/krb5ccmachine_KAZNA.DE
creating context using fsuid 0 (save_uid 0)
creating tcp client for server thor.kazna.de
DEBUG: port already set to 2049
creating context with server nfs@thor.kazna.de
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff6ac272f in ?? () from /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2
(gdb) bt
#0 0x00007ffff6ac272f in ?? () from /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2
#1 0x00007ffff6ac33e2 in gss_init_sec_context () from /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2
#2 0x00007ffff7bcf863 in ?? () from /lib/x86_64-linux-gnu/libtirpc.so.1
#3 0x00007ffff7bcfbf9 in authgss_create () from /lib/x86_64-linux-gnu/libtirpc.so.1
#4 0x00007ffff7bcfcfc in authgss_create_default () from /lib/x86_64-linux-gnu/libtirpc.so.1
#5 0x0000000000405126 in ?? ()
#6 0x0000000000405bf2 in ?? ()
#7 0x000000000040685a in ?? ()
#8 0x0000000000404aac in ?? ()
#9 0x0000000000403941 in ?? ()
#10 0x00007ffff6d18b45 in __libc_start_main (main=0x403690, argc=2, argv=0x7fffffffe0e8, init=<optimized out>, fini=<optimized out>,
rtld_fini=<optimized out>, stack_end=0x7fffffffe0d8) at libc-start.c:287
#11 0x00000000004039ae in ?? ()
-- Package-specific info:
-- rpcinfo --
program vers proto port service
100000 4 tcp 111 portmapper
100000 3 tcp 111 portmapper
100000 2 tcp 111 portmapper
100000 4 udp 111 portmapper
100000 3 udp 111 portmapper
100000 2 udp 111 portmapper
-- /etc/default/nfs-common --
NEED_STATD=no
STATDOPTS=
NEED_IDMAPD=yes
NEED_GSSD=yes
-- /etc/idmapd.conf --
[General]
Verbosity = 0
Pipefs-Directory = /run/rpc_pipefs
Domain = kazna.de
[Mapping]
Nobody-User = nobody
Nobody-Group = nogroup
-- /etc/fstab --
#thor.kazna.de:/ /srv/backups nfs sec=krb5p,rw,noatime,nodiratime,nodev,nosuid,noexec,proto=tcp,noauto,x-systemd.automount,x-systemd.device-timeout=60 0 0
-- /proc/mounts --
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.14-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=uk_UA.UTF-8, LC_CTYPE=uk_UA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages nfs-common depends on:
ii adduser 3.113+nmu3
ii initscripts 2.88dsf-53.2
ii libc6 2.19-7
ii libcap2 1:2.24-3
ii libcomerr2 1.42.11-2
ii libdevmapper1.02.1 2:1.02.85-2
ii libevent-2.0-5 2.0.21-stable-1
ii libgssglue1 0.4-2
ii libk5crypto3 1.12.1+dfsg-5
ii libkeyutils1 1.5.9-4
ii libkrb5-3 1.12.1+dfsg-5
ii libmount1 2.20.1-5.8
ii libnfsidmap2 0.25-5
ii libtirpc1 0.2.4-1
ii libwrap0 7.6.q-25
ii lsb-base 4.1+Debian13
ii rpcbind 0.2.1-4
ii ucf 3.0030
Versions of packages nfs-common recommends:
ii python 2.7.8-1
Versions of packages nfs-common suggests:
pn open-iscsi <none>
pn watchdog <none>
-- Configuration Files:
/etc/default/nfs-common changed:
NEED_STATD=no
STATDOPTS=
NEED_IDMAPD=yes
NEED_GSSD=yes
-- debconf-show failed
Reply to: