Bug#848017: "unable to obtain root (machine) credentials" without gss/krb5i
Package: nfs-common
Version: 1:1.2.8-9.2
rpc.svcgssd woes at boot time
-- Unit rpc-svcgssd.service has begun starting up.
Dec 13 10:04:07 dpcl064.ac.aixigo.de rpc.svcgssd[2019]: ERROR: GSS-API: error in gss_acquire_cred(): GSS_S_FAILURE (Unspecified GSS failure. Minor code may provide more information) - No key table entry found matching nfs/@
Dec 13 10:04:07 dpcl064.ac.aixigo.de rpc.svcgssd[2019]: unable to obtain root (machine) credentials
Dec 13 10:04:07 dpcl064.ac.aixigo.de rpc.svcgssd[2019]: do you have a keytab entry for nfs/<your.host>@<YOUR.REALM> in /etc/krb5.keytab?
Dec 13 10:04:07 dpcl064.ac.aixigo.de systemd[1]: rpc-svcgssd.service: Control process exited, code=exited status=1
Dec 13 10:04:07 dpcl064.ac.aixigo.de systemd[1]: Failed to start RPC security service for NFS server.
-- Subject: Unit rpc-svcgssd.service has failed
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- Unit rpc-svcgssd.service has failed.
--
-- The result is failed.
Dec 13 10:04:07 dpcl064.ac.aixigo.de systemd[1]: rpc-svcgssd.service: Unit entered failed state.
Dec 13 10:04:07 dpcl064.ac.aixigo.de systemd[1]: rpc-svcgssd.service: Failed with result 'exit-code'.
I do have Kerberos in place (freeipa), but not for NFS access.
The exports file on the NFServer says
/space/data 10.23.96.0/22(rw,insecure,async,no_root_squash,no_subtree_check,no_acl)
/space/home 10.23.96.0/22(rw,insecure,async,no_root_squash,no_subtree_check,no_acl)
nfs-common of Wheezy and Jessie don't have this problem.
Regards
Harri
Reply to: