Results 1 to 6 of 6

Thread: [13.2] NFS issues

  1. #1
    Join Date
    May 2009
    Location
    Liège Walifornia
    Posts
    490

    Question [13.2] NFS issues

    Greetings.

    Since the 16th of november 2017, I receive in the system journal errors concerning the NFS server calles antares running LEAP 42.2.

    Nov 16 17:36:47 sirius.dezordi.world rpc.gssd[1771]: ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host antares.dezordi.world
    Nov 16 17:36:47 sirius.dezordi.world rpc.gssd[1770]: ERROR: No credentials found for connection to server antares.dezordi.world
    Nov 16 17:36:47 sirius.dezordi.world rpc.gssd[1770]: ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host antares.dezordi.world
    Nov 16 17:36:47 sirius.dezordi.world rpc.gssd[1769]: ERROR: No credentials found for connection to server antares.dezordi.world
    Nov 16 17:36:47 sirius.dezordi.world rpc.gssd[1769]: ERROR: gssd_refresh_krb5_machine_credential: no usable keytab entry found in keytab /etc/krb5.keytab for connection with host antares.dezordi.world

    I did an update concerning some security holes and since it seems something is missing in my configuration.

    I do not want to use GSS security so both client (sirius) and server (antares) are not configured to use it... should I ?
    I opened the port 111 on both computers (if I close it there is no more connection between sirius and antares).

    Is someone able to explain why those messages strangely appeared ?

  2. #2
    Join Date
    Jun 2008
    Location
    Auckland, NZ
    Posts
    23,695
    Blog Entries
    1

    Default Re: [13.2] NFS issues

    Can you show us how /etc/sysconfig/nfs is configured on your server?

    https://doc.opensuse.org/documentati...e/cha.nfs.html

  3. #3
    Join Date
    May 2009
    Location
    Liège Walifornia
    Posts
    490

    Default Re: [13.2] NFS issues

    Code:
    USE_KERNEL_NFSD_NUMBER="16"
    
    MOUNTD_PORT="4001"
    
    NFS_SECURITY_GSS="no"
    
    NFS3_SERVER_SUPPORT="yes"
    
    NFS4_SUPPORT="yes"
    
    SM_NOTIFY_OPTIONS=""
    
    NFS_START_SERVICES="yes"
    
    STATD_OPTIONS=""
    
    NFSV4LEASETIME=""
    
    RPC_PIPEFS_DIR=""
    
    SVCGSSD_OPTIONS=""
    
    NFSD_OPTIONS=""
    
    GSSD_OPTIONS=""
    
    NFS4_SERVER_MINOR_VERSION="0"
    
    MOUNTD_OPTIONS=""
    
    NFS_GSSD_AVOID_DNS="no"
    
    STATD_PORT=""
    
    STATD_HOSTNAME=""
    
    LOCKD_TCPPORT=""
    
    LOCKD_UDPPORT=""
    I have the feeling that the default security scheme is no more "sys" but "kbr" (kerberos)...

  4. #4
    Join Date
    Jun 2008
    Location
    Auckland, NZ
    Posts
    23,695
    Blog Entries
    1

    Default Re: [13.2] NFS issues

    Quote Originally Posted by soundlord View Post
    Code:
    USE_KERNEL_NFSD_NUMBER="16"
    
    MOUNTD_PORT="4001"
    
    NFS_SECURITY_GSS="no"
    
    NFS3_SERVER_SUPPORT="yes"
    
    NFS4_SUPPORT="yes"
    
    SM_NOTIFY_OPTIONS=""
    
    NFS_START_SERVICES="yes"
    
    STATD_OPTIONS=""
    
    NFSV4LEASETIME=""
    
    RPC_PIPEFS_DIR=""
    
    SVCGSSD_OPTIONS=""
    
    NFSD_OPTIONS=""
    
    GSSD_OPTIONS=""
    
    NFS4_SERVER_MINOR_VERSION="0"
    
    MOUNTD_OPTIONS=""
    
    NFS_GSSD_AVOID_DNS="no"
    
    STATD_PORT=""
    
    STATD_HOSTNAME=""
    
    LOCKD_TCPPORT=""
    
    LOCKD_UDPPORT=""
    I have the feeling that the default security scheme is no more "sys" but "kbr" (kerberos)...
    Perhaps. Try disabling NSFv4 and observe if the shares then mount without error (mounted using NFSv3 on client).

    An old bug report describing similar behaviour...
    https://bugzilla.opensuse.org/show_bug.cgi?id=916736

  5. #5
    Join Date
    May 2009
    Location
    Liège Walifornia
    Posts
    490

    Default Re: [13.2] NFS issues

    Greetings and thank you for the help ^^

    I tried to set sec=sys in the /etc/nfsmount.conf file.

    It works !!
    The exports are mounted and the client no more displays the error messages.

    It seems, but I never dig deeper, nfs server set kerberos as the default security instead of sys.

  6. #6
    Join Date
    Jun 2008
    Location
    Auckland, NZ
    Posts
    23,695
    Blog Entries
    1

    Default Re: [13.2] NFS issues

    Quote Originally Posted by soundlord View Post
    Greetings and thank you for the help ^^

    I tried to set sec=sys in the /etc/nfsmount.conf file.

    It works !!
    The exports are mounted and the client no more displays the error messages.

    It seems, but I never dig deeper, nfs server set kerberos as the default security instead of sys.
    Yes, but perhaps that is the case when the default version is NFSv4. I haven't checked this in depth either.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •