Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #74053

Bug#1002826: rpc-svcgssd.service fails with "unable to obtain root (machine) credentials"

Cross-posted to 2 groups.

Show all headers | View raw

Package: nfs-common
Version: 1:1.3.4-6

systemd moans about krb5.keytab at boot time

```
# systemctl --failed
   UNIT                LOAD   ACTIVE SUB    DESCRIPTION
* rpc-svcgssd.service loaded failed failed RPC security service for NFS server

LOAD   = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB    = The low-level unit activation state, values depend on unit type.
1 loaded units listed.

# systemctl status rpc-svcgssd
* rpc-svcgssd.service - RPC security service for NFS server
      Loaded: loaded (/etc/systemd/system/rpc-svcgssd.service; static)
      Active: failed (Result: exit-code) since Wed 2021-12-29 14:00:51 CET; 8min ago
     Process: 301 ExecStart=/usr/sbin/rpc.svcgssd $SVCGSSDARGS (code=exited, status=1/FAILURE)
         CPU: 6ms

Dec 29 14:00:50 nfs00.example.com systemd[1]: Starting RPC security service for NFS server...
Dec 29 14:00:50 nfs00.example.com rpc.svcgssd[302]: ERROR: GSS-API: error in gss_acquire_cred(): GSS_S_FAILURE (Unspecified GSS failure.  Minor code may provide more information) - No key table entry found matching nfs/@
Dec 29 14:00:50 nfs00.example.com rpc.svcgssd[302]: unable to obtain root (machine) credentials
Dec 29 14:00:50 nfs00.example.com rpc.svcgssd[302]: do you have a keytab entry for nfs/<your.host>@<YOUR.REALM> in /etc/krb5.keytab?
Dec 29 14:00:51 nfs00.example.com systemd[1]: rpc-svcgssd.service: Control process exited, code=exited, status=1/FAILURE
Dec 29 14:00:51 nfs00.example.com systemd[1]: rpc-svcgssd.service: Failed with result 'exit-code'.
Dec 29 14:00:51 nfs00.example.com systemd[1]: Failed to start RPC security service for NFS server.
```

Shouldn't svcgssd either exit silently with 0 or become optional? Looking at
nfs(5) Kerberos authentication for NFS appears to be optional, regardless if
there is a keytab file with or without NFS credentials.


Regards

Harri

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1002826: rpc-svcgssd.service fails with "unable to obtain root (machine) credentials" Harald Dunkel <harri@afaics.de> - 2021-12-29 15:00 +0100
  Processed: Re: Bug#1002826: rpc-svcgssd.service fails with  "unable to obtain root (machine) credentials" "Debian Bug Tracking System" <owner@bugs.debian.org> - 2021-12-29 17:50 +0100
  Bug#1002826: rpc-svcgssd.service fails with "unable to obtain root (machine) credentials" Salvatore Bonaccorso <carnil@debian.org> - 2021-12-29 17:50 +0100
    Re: Bug#1002826: rpc-svcgssd.service fails with "unable to obtain  root (machine) credentials" Harald Dunkel <harri@afaics.de> - 2022-01-16 20:00 +0100
    Bug#1002826: rpc-svcgssd.service fails with "unable to obtain root (machine) credentials" Harald Dunkel <harald.dunkel@aixigo.com> - 2022-02-01 14:20 +0100

csiph-web