Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #59714 > unrolled thread
| Started by | Matt Weatherford <mbw@uw.edu> |
|---|---|
| First post | 2017-12-20 21:00 +0100 |
| Last post | 2018-02-16 16:00 +0100 |
| Articles | 2 — 2 participants |
Back to article view | Back to linux.debian.kernel
Bug#884871: nfs-kernel-server: svcgssd starts anyways when "disabled" in /etc/default/nfs-kernel-server Matt Weatherford <mbw@uw.edu> - 2017-12-20 21:00 +0100
Bug#884871: rpc.svcgssd starts while disabled in /etc/default/nfs-kernel-server Sergio Gelato <Sergio.Gelato@astro.su.se> - 2018-02-16 16:00 +0100
| From | Matt Weatherford <mbw@uw.edu> |
|---|---|
| Date | 2017-12-20 21:00 +0100 |
| Subject | Bug#884871: nfs-kernel-server: svcgssd starts anyways when "disabled" in /etc/default/nfs-kernel-server |
| Message-ID | <uYSGZ-Nx-3@gated-at.bofh.it> |
Package: nfs-kernel-server
Version: 1:1.3.4-2.1
Severity: important
Dear Maintainer,
First of all, thank you for all you do to support Debian!!!!!!!!
Heres my /etc/default/nfs-kernel-server config file, it clearly "disables svcgssd" :
root@filer:/etc/default# vi nfs-kernel-server
# Number of servers to start up
RPCNFSDCOUNT=8
# Runtime priority of server (see nice(1))
RPCNFSDPRIORITY=0
# Options for rpc.mountd.
# If you have a port-based firewall, you might want to set up
# a fixed port here using the --port option. For more information,
# see rpc.mountd(8) or http://wiki.debian.org/SecuringNFS
# To disable NFSv4 on the server, specify '--no-nfs-version 4' here
#RPCMOUNTDOPTS="--manage-gids"
### TO DEBUG USE:
RPCMOUNTDOPTS="--manage-gids --debug all"
# Do you want to start the svcgssd daemon? It is only required for Kerberos
# exports. Valid alternatives are "yes" and "no"; the default is "no".
NEED_SVCGSSD=no
# Options for rpc.svcgssd.
#RPCSVCGSSDOPTS=""
RPCNFSDCOUNT="64 --no-nfs-version 3 --no-nfs-version 4"
~
~
~
But if I restart the nfs-server process, it errors out like this:
root@filer:/etc/default#
root@filer:/etc/default# service nfs-server restart
Job for nfs-server.service failed because the control process exited with error code.
See "systemctl status nfs-server.service" and "journalctl -xe" for details.
root@filer:/etc/default# journalctl -xe
Dec 20 11:38:03 filer systemd[1]: Starting NFSv4 ID-name mapping service...
-- Subject: Unit nfs-idmapd.service has begun start-up
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- Unit nfs-idmapd.service has begun starting up.
Dec 20 11:38:03 filer systemd[1]: Starting RPC security service for NFS server...
-- Subject: Unit rpc-svcgssd.service has begun start-up
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- Unit rpc-svcgssd.service has begun starting up.
Dec 20 11:38:03 filer systemd[1]: Started NFSv4 ID-name mapping service.
-- Subject: Unit nfs-idmapd.service has finished start-up
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- Unit nfs-idmapd.service has finished starting up.
--
-- The start-up result is done.
Dec 20 11:38:03 filer rpc.svcgssd[10651]: ERROR: GSS-API: error in gss_acquire_cred(): GSS_S_FAILURE (Unspecified GSS failure. Minor code
Dec 20 11:38:03 filer rpc.svcgssd[10651]: unable to obtain root (machine) credentials
Dec 20 11:38:03 filer rpc.svcgssd[10651]: do you have a keytab entry for nfs/<your.host>@<YOUR.REALM> in /etc/krb5.keytab?
Dec 20 11:38:03 filer systemd[1]: rpc-svcgssd.service: Control process exited, code=exited status=1
Dec 20 11:38:03 filer systemd[1]: Failed to start RPC security service for NFS server.
-- Subject: Unit rpc-svcgssd.service has failed
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- Unit rpc-svcgssd.service has failed.
--
-- The result is failed.
Dec 20 11:38:03 filer systemd[1]: rpc-svcgssd.service: Unit entered failed state.
Dec 20 11:38:03 filer systemd[1]: rpc-svcgssd.service: Failed with result 'exit-code'.
Dec 20 11:38:03 filer rpc.mountd[10654]: Version 1.3.3 starting
Dec 20 11:38:03 filer systemd[1]: Started NFS Mount Daemon.
-- Subject: Unit nfs-mountd.service has finished start-up
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- Unit nfs-mountd.service has finished starting up.
I am trying to use nfs 4.1 (not 4) with no kerberos, but cant figure out how to start it up.
If I take out the " --no-nfs-version 4" then nfs-server starts up ok, but I have version 4 enabled where I only want version 4.1 and higher working:
root@filer:~# cat /proc/fs/nfsd/versions
-2 -3 +4 +4.1 +4.2
root@filer:~#
-- Package-specific info:
-- rpcinfo --
program vers proto port service
100000 4 tcp 111 portmapper
100000 3 tcp 111 portmapper
100000 2 tcp 111 portmapper
100000 4 udp 111 portmapper
100000 3 udp 111 portmapper
100000 2 udp 111 portmapper
100003 3 tcp 2049 nfs
100227 3 tcp 2049
100003 3 udp 2049 nfs
100227 3 udp 2049
100024 1 udp 51907 status
100024 1 tcp 59263 status
100003 4 tcp 2049 nfs
100003 4 udp 2049 nfs
100021 1 udp 38357 nlockmgr
100021 3 udp 38357 nlockmgr
100021 4 udp 38357 nlockmgr
100021 1 tcp 36441 nlockmgr
100021 3 tcp 36441 nlockmgr
100021 4 tcp 36441 nlockmgr
-- /etc/default/nfs-kernel-server --
RPCNFSDCOUNT=8
RPCNFSDPRIORITY=0
RPCMOUNTDOPTS="--manage-gids --debug all"
NEED_SVCGSSD=no
RPCNFSDCOUNT="64 --no-nfs-version 3 --no-nfs-version 4"
-- /etc/exports --
-- System Information:
Debian Release: 9.3
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-4-amd64 (SMP w/24 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages nfs-kernel-server depends on:
ii init-system-helpers 1.48
ii keyutils 1.5.9-9
ii libblkid1 2.29.2-1
ii libc6 2.24-11+deb9u1
ii libcap2 1:2.25-1
ii libsqlite3-0 3.16.2-5+deb9u1
ii libtirpc1 0.2.5-1.2
ii libwrap0 7.6.q-26
ii lsb-base 9.20161125
ii netbase 5.4
ii nfs-common 1:1.3.4-2.1
ii ucf 3.0036
nfs-kernel-server recommends no packages.
nfs-kernel-server suggests no packages.
-- no debconf information
[toc] | [next] | [standalone]
| From | Sergio Gelato <Sergio.Gelato@astro.su.se> |
|---|---|
| Date | 2018-02-16 16:00 +0100 |
| Subject | Bug#884871: rpc.svcgssd starts while disabled in /etc/default/nfs-kernel-server |
| Message-ID | <vjPEu-1T6-5@gated-at.bofh.it> |
| In reply to | #59714 |
rpc.svcgssd is also needed on clients in order to support NFSv4.0 callbacks. It was moved from nfs-kernel-server to nfs-common for this reason. See Debian bug #651558. Apparently the task of starting rpc.svcgssd under SysV init is still entrusted to the nfs-kernel-server package. Maybe something needs to be done about that. If you are using systemd, you may find the file systemd/README in the source package to be of interest. The relevant portion reads: "rpc.gssd and rpc.svcgssd are assumed to be needed if /etc/krb5.keytab is present. If a site needs this file present but does not want the gss daemons running, it should create /etc/systemd/system/rpc-gssd.service.d/01-disable.conf and /etc/systemd/system/rpc-svcgssd.service.d/01-disable.conf containing [Unit] ConditionNull=false " I think this (or equivalent information; I'd have suggested "systemctl disable" instead of the above approach) should be included somewhere under /usr/share/doc/nfs-common/. As for the side question on how to disable version 4.0 but not 4.1: try passing --no-nfs-version=4.0 to nfsd. (I haven't tested this myself yet, only read utils/nfsd/nfsd.c. The man page is too terse about this.)
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.kernel
csiph-web