Bug#897917: Stretch kernel 4.9.88-1 breaks startup of RPC, KDC services
Package: linux-image-4.9.0-6-amd64
Version: 4.9.88-1
Issue:
======
Kernel "linux-image-4.9.0-6-amd64," version 4.9.88-1, breaks systemd
startup of RPC, Kerberos KDC services.
Description:
============
After upgrading to the latest Stretch kernel (4.9.88-1), RPC and KDC
services time out during the boot process. This issue is being seen on
a Kerberos KDC that is also an NFS client. Kerberos auth. and
encryption are being used with NFS in this environment, and this KDC
provides the Kerberos services for that to work.
Network is functional prior to these services starting, which is
proper.
After the server has booted completely, I can issue `service krb5-kdc
restart` and, after a short delay, the KDC service starts normally.
Not sure if this is a kernel bug, a systemd bug, or something else.
Since the kernel package was the only thing that was upgraded before
the issue started, I'm leaning toward the kernel.
Relevant output from /var/log/syslog:
-------------------------------------
May 4 09:03:17 <redacted> systemd[1]: rpc-svcgssd.service: Start
operation timed out. Terminating.
May 4 09:03:17 <redacted> systemd[1]: Failed to start RPC security
service for NFS server.
May 4 09:03:17 <redacted> systemd[1]: rpc-svcgssd.service: Unit
entered failed state.
May 4 09:03:17 <redacted> systemd[1]: rpc-svcgssd.service: Failed with
result 'timeout'.
May 4 09:03:17 <redacted> systemd[1]: rpc-gssd.service: Start
operation timed out. Terminating.
May 4 09:03:17 <redacted> systemd[1]: Failed to start RPC security
service for NFS client and server.
May 4 09:03:17 <redacted> systemd[1]: rpc-gssd.service: Unit entered
failed state.
May 4 09:03:17 <redacted> systemd[1]: rpc-gssd.service: Failed with
result 'timeout'.
May 4 09:03:20 <redacted> systemd[1]: krb5-kdc.service: Start
operation timed out. Terminating.
May 4 09:03:20 <redacted> systemd[1]: Failed to start Kerberos 5 Key
Distribution Center.
May 4 09:03:20 <redacted> systemd[1]: krb5-kdc.service: Unit entered
failed state.29s random time.
May 4 09:03:20 <redacted> systemd[1]: krb5-kdc.service: Failed with
result 'timeout'. random time.
Workaround:
===========
Rolling back to Stretch kernel 4.9.82-1+deb9u3 fixes the issue.
Setup:
======
1. KDC package: krb5-kdc 1.15-1+deb9u1
2. NFS package: nfs-common 1:1.3.4-2.1
3. Kernel: linux-image-4.9.0-6-amd64 4.9.88-1
4. Systemd version: 232-25+deb9u3
5. Server is a 64-bit Xen PV domU
Reply to: