Attachment 543303 Details for Bug 817651

Test results following installation of kernel in comment 16

test3-gssd.txt (text/plain), 33.99 KB, created by Forgotten User fbKqKvv6Lf on 2013-06-07 11:57:45 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Forgotten User fbKqKvv6Lf

Created: 2013-06-07 11:57:45 UTC

Size: 33.99 KB

patch

obsolete

>#### The following 6 tests below are using the following command:
>mount -vvv -t nfs -o sec=krb5,proto=tcp,vers=4 pstor002.domain.local: /mnt/test2
>
>
>#### Test 1 (fail)
>#### rpg.gssd flags: -vvvvvvvv -f
>#### user   uid    kerberos_ticket
>#### root   0      no
>#### usr100 1000   no
>#### Debug output:
>
>hppc134:/etc # /usr/sbin/rpc.gssd -vvvvvvvv -f
>beginning poll
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt62)
>handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt62)
>process_krb5_upcall: service is '*'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt62)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt62)
>process_krb5_upcall: service is '<null>'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>Closing 'gssd' pipe for /var/lib/nfs/rpc_pipefs/nfs/clnt62
>destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt62
>
>#### Test 2 (fail)
>#### rpg.gssd flags: -vvvvvvvv -f -n
>#### user   uid    kerberos_ticket
>#### root   0      no
>#### usr100 1000   no
>#### Debug output:
>
># /usr/sbin/rpc.gssd -vvvvvvvv -f -n
>beginning poll
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt61)
>handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt61)
>process_krb5_upcall: service is '*'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt61)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt61)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>getting credentials for client with uid 0 for server pstor002.example.org
>Error doing scandir on directory '/run/user/0': No such file or directory
>WARNING: Failed to create krb5 context for user with uid 0 for server pstor002.example.org
>doing error downcall
>destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt61
>
>
>#### Test 3 (fail)
>#### rpg.gssd flags: -vvvvvvvv -f
>#### user   uid    kerberos_ticket
>#### root   0      yes
>#### usr100 1000   no
>#### Debug output:
>hppc134:/etc # /usr/sbin/rpc.gssd -vvvvvvvv -f
>beginning poll
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt63)
>handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt63)
>process_krb5_upcall: service is '*'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt63)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt63)
>process_krb5_upcall: service is '<null>'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>Closing 'gssd' pipe for /var/lib/nfs/rpc_pipefs/nfs/clnt63
>destroying client /var/lib/nfs/rpc_pipefs/nfs/clnt63
>
>
>#### Test 4 (succes)
>#### rpg.gssd flags: -vvvvvvvv -f -n
>#### user   uid    kerberos_ticket
>#### root   0      yes
>#### usr100 1000   no
>#### Comment: Can only browse as root, but when user get a ticket with kinit then user can also browse, even when root loses it's ricket, so the ticket is only required at mount time.
>#### Debug output:
>hppc134:/etc # /usr/sbin/rpc.gssd -vvvvvvvv -f -n
>beginning poll
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt66)
>handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt66)
>process_krb5_upcall: service is '*'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt66)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt66)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_0'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370606811
>using FILE:/tmp/krb5cc_0 as credentials cache for client with uid 0 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_0
>creating context using fsuid 0 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35877
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt67)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt67)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_0'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370606811
>using FILE:/tmp/krb5cc_0 as credentials cache for client with uid 0 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_0
>creating context using fsuid 0 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35877
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt67)
>handle_gssd_upcall: 'mech=krb5 uid=1000 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt67)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 1000 for server pstor002.example.org
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_0' owned by 0, not 1000
>getting credentials for client with uid 1000 for server pstor002.example.org
>WARNING: Failed to create krb5 context for user with uid 1000 for server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt67)
>handle_gssd_upcall: 'mech=krb5 uid=1000 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt67)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 1000 for server pstor002.example.org
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_0' owned by 0, not 1000
>getting credentials for client with uid 1000 for server pstor002.example.org
>WARNING: Failed to create krb5 context for user with uid 1000 for server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt67)
>handle_gssd_upcall: 'mech=krb5 uid=1000 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clnt67)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 1000 for server pstor002.example.org
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_0' owned by 0, not 1000
>getting credentials for client with uid 1000 for server pstor002.example.org
>WARNING: Failed to create krb5 context for user with uid 1000 for server pstor002.example.org
>doing error downcall
>
>#### Test 5 (fail)
>#### rpg.gssd flags: -vvvvvvvv -f -n
>#### user   uid    kerberos_ticket
>#### root   0      no
>#### usr100 1000   yes
>#### Comment: Cannot mount because root does not have ticket, even though user has (but that makes sense).
>#### Debug output:
>hppc134:/etc # /usr/sbin/rpc.gssd -vvvvvvvv -f -n
>beginning poll
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd2)
>handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd2)
>process_krb5_upcall: service is '*'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd2)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd2)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_1000' owned by 1000, not 0
>getting credentials for client with uid 0 for server pstor002.example.org
>Error doing scandir on directory '/run/user/0': No such file or directory
>WARNING: Failed to create krb5 context for user with uid 0 for server pstor002.example.org
>doing error downcall
>Closing 'gssd' pipe for /var/lib/nfs/rpc_pipefs/nfs/clntd2
>destroying client /var/lib/nfs/rpc_pipefs/nfs/clntd2
>
>#### Test 6 (success)
>#### rpg.gssd flags: -vvvvvvvv -f -n
>#### user   uid    kerberos_ticket
>#### root   0      yes
>#### usr100 1000   yes
>#### Comment: 
>#### Debug output:
>hppc134:/etc # /usr/sbin/rpc.gssd -vvvvvvvv -f -n
>beginning poll
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd3)
>handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd3)
>process_krb5_upcall: service is '*'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd3)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd3)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_1000' owned by 1000, not 0
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_0'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370607458
>using FILE:/tmp/krb5cc_0 as credentials cache for client with uid 0 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_0
>creating context using fsuid 0 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35996
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd4)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd4)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_1000' owned by 1000, not 0
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_0'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370607462
>using FILE:/tmp/krb5cc_0 as credentials cache for client with uid 0 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_0
>creating context using fsuid 0 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35996
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd4)
>handle_gssd_upcall: 'mech=krb5 uid=1000 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd4)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 1000 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_1000'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370606915
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_0' owned by 0, not 1000
>using FILE:/tmp/krb5cc_1000 as credentials cache for client with uid 1000 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_1000
>creating context using fsuid 1000 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35450
>
>###########################################################################################################
>Now no longer using command line mount, but creating fstab entry:
>pstor002.domain.local: /mnt/test2 nfs sec=krb5,proto=tcp,vers=4,users 0 0
>and issuing command
>mount /mnt/test2
>
>#### Test 7 (success)
>#### rpg.gssd flags: -vvvvvvvv -f -n
>#### user   uid    kerberos_ticket
>#### root   0      yes
>#### usr100 1000   yes
>#### Comment: mount /mnt/test2 as root. User can also browse
>#### Debug output:
>
>hppc134:/etc # /usr/sbin/rpc.gssd -vvvvvvvv -f -n
>beginning poll
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd5)
>handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd5)
>process_krb5_upcall: service is '*'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd5)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd5)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_1000' owned by 1000, not 0
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_0'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370607462
>using FILE:/tmp/krb5cc_0 as credentials cache for client with uid 0 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_0
>creating context using fsuid 0 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35780
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd6)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd6)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_1000' owned by 1000, not 0
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_0'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370607462
>using FILE:/tmp/krb5cc_0 as credentials cache for client with uid 0 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_0
>creating context using fsuid 0 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35780
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd6)
>handle_gssd_upcall: 'mech=krb5 uid=1000 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd6)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 1000 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_1000'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370606915
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_0' owned by 0, not 1000
>using FILE:/tmp/krb5cc_1000 as credentials cache for client with uid 1000 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_1000
>creating context using fsuid 1000 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35234
>
>#### Test 7 (success)
>#### rpg.gssd flags: -vvvvvvvv -f -n
>#### user   uid    kerberos_ticket
>#### root   0      yes
>#### usr100 1000   yes
>#### Comment: mount /mnt/test2 as user. Root can also browse
>#### Debug output:
>
>hppc134:/etc # /usr/sbin/rpc.gssd -vvvvvvvv -f -n
>beginning poll
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd7)
>handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd7)
>process_krb5_upcall: service is '*'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd7)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd7)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_1000' owned by 1000, not 0
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_0'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370607462
>using FILE:/tmp/krb5cc_0 as credentials cache for client with uid 0 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_0
>creating context using fsuid 0 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35677
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd8)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd8)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_1000' owned by 1000, not 0
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_0'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370607462
>using FILE:/tmp/krb5cc_0 as credentials cache for client with uid 0 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_0
>creating context using fsuid 0 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35677
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd8)
>handle_gssd_upcall: 'mech=krb5 uid=1000 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd8)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 1000 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC 'FILE:/tmp/krb5cc_1000'(usr100@DOMAIN.LOCAL) passed all checks and has mtime of 1370606915
>CC '/tmp/krb5cc_0' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_0' owned by 0, not 1000
>using FILE:/tmp/krb5cc_1000 as credentials cache for client with uid 1000 for server pstor002.example.org
>using environment variable to select krb5 ccache FILE:/tmp/krb5cc_1000
>creating context using fsuid 1000 (save_uid 0)
>creating tcp client for server pstor002.example.org
>DEBUG: port already set to 2049
>creating context with server nfs@pstor002.example.org
>DEBUG: serialize_krb5_ctx: lucid version!
>prepare_krb5_rfc4121_buffer: protocol 1
>prepare_krb5_rfc4121_buffer: serializing key with enctype 18 and size 32
>doing downcall lifetime_rec 35131
>
>
>
>#### Test 8 (fail)
>#### rpg.gssd flags: -vvvvvvvv -f -n
>#### user   uid    kerberos_ticket
>#### root   0      no
>#### usr100 1000   yes
>#### Comment: mount /mnt/test2 as user fails, and I would expect it to work. After all the mount command is issues by user who has a valid kerberos ticket
>#### Debug output:
>
>hppc134:/etc # /usr/sbin/rpc.gssd -vvvvvvvv -f -n
>beginning poll
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd9)
>handle_gssd_upcall: 'mech=krb5 uid=0 service=* enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd9)
>process_krb5_upcall: service is '*'
>Full hostname for 'pstor002.example.org' is 'pstor002.example.org'
>Full hostname for 'hppc134.domain.local' is 'hppc134.domain.local'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'HPPC134.DOMAIN.LOCAL$@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'root/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'nfs/hppc134.domain.local@DOMAIN.LOCAL'
>Key table file '/etc/krb5.keytab' not found while getting keytab entry for 'host/hppc134.domain.local@DOMAIN.LOCAL'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'
>ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host pstor002.example.org
>ERROR: No credentials found for connection to server pstor002.example.org
>doing error downcall
>handling gssd upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd9)
>handle_gssd_upcall: 'mech=krb5 uid=0 enctypes=18,17,16,23,3,1,2 '
>handling krb5 upcall (/var/lib/nfs/rpc_pipefs/nfs/clntd9)
>process_krb5_upcall: service is '<null>'
>getting credentials for client with uid 0 for server pstor002.example.org
>CC '/tmp/krb5cc_1000' being considered, with preferred realm 'DOMAIN.LOCAL'
>CC '/tmp/krb5cc_1000' owned by 1000, not 0
>getting credentials for client with uid 0 for server pstor002.example.org
>Error doing scandir on directory '/run/user/0': No such file or directory
>WARNING: Failed to create krb5 context for user with uid 0 for server pstor002.example.org
>doing error downcall
>Closing 'gssd' pipe for /var/lib/nfs/rpc_pipefs/nfs/clntd9
>destroying client /var/lib/nfs/rpc_pipefs/nfs/clntd9
>

Actions: View

Attachments on bug 817651: 538304 | 541721 | 541877 | 541970 | 543267 | 543303