[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

NFS4 met krb5 werkt plotseling niet meer



Debian-users!

Na een paar dagen afwezigheid lukt het de nfs-clients plotseling niet meer in mijn nfs4-server in te loggen. Het lijkt aan kerberos te liggen.

nfs4-server:/var/log/syslog:
"...
Jan  3 21:20:39 custard rpc.gssd[15716]: exiting on signal 15
Jan  3 21:20:39 custard rpc.statd[15700]: Caught signal 15, un-registering and exiting.
Jan  3 21:20:40 custard rpc.statd[16890]: Version 1.1.2 Starting
Jan  3 21:20:41 custard rpc.idmapd[16901]: libnfsidmap: using domain: <domain>
Jan  3 21:20:41 custard rpc.idmapd[16901]: libnfsidmap: using translation method: nsswitch
Jan  3 21:20:41 custard rpc.idmapd[16902]: Expiration time is 600 seconds.
Jan  3 21:20:41 custard rpc.idmapd[16902]: Opened /proc/net/rpc/nfs4.nametoid/channel
Jan  3 21:20:41 custard rpc.idmapd[16902]: Opened /proc/net/rpc/nfs4.idtoname/channel
Jan  3 21:20:41 custard rpc.gssd[16905]: rpcsec_gss: debug level is 3
Jan  3 21:20:41 custard rpc.gssd[16906]: beginning poll
Jan  3 21:20:42 custard nfsd[16946]: nfssvc: Setting version failed: errno 16 (Device or resource busy)
Jan  3 21:20:42 custard rpc.svcgssd[16957]: rpcsec_gss: debug level is 3
Jan  3 21:20:42 custard rpc.svcgssd[16958]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No principal in keytab matches desired name
Jan  3 21:20:42 custard rpc.svcgssd[16958]: Unable to obtain credentials for 'nfs'
Jan  3 21:20:42 custard rpc.svcgssd[16958]: unable to obtain root (machine) credentials
Jan  3 21:20:42 custard rpc.svcgssd[16958]: do you have a keytab entry for nfs/<your.host>@<YOUR.REALM> in /etc/krb5.keytab?
..."

De conf's en keytab's waren de laatste tijd niet gewijzigd. Waarom denkt kerberos plotseling dat de keytab entry voor nfs/<nfs-server>@<REALM> afwezig is?

Doeg,
Jaap.



-- 

Jaap van Wingerde
e-mail: 1234567890@vanwingerde.net
web: http://jaap.vanwingerde.net/

Attachment: signature.asc
Description: PGP signature


Reply to: