[Bug 2138954] Re: Mounting with NFS over kerberos (krb5p) does not work
Thanks for clarifying. Even if the reporter can't reproduce the issue now, I'll leave this bug open. The upstream patch was related to cache and I suspect the issue might surface again. If anyone hits this issue and can reproduce it, please comment and we'll see if it's worth backporting a fix. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138954 Title: Mounting with NFS over kerberos (krb5p) does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/2138954/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2138954] Re: Mounting with NFS over kerberos (krb5p) does not work
I am using the stock one from 24.04.4: # dpkg -l nfs-common Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name VersionArchitecture Description +++-==-==--= ii nfs-common 1:2.6.4-3ubuntu5.1 amd64NFS support files common to client and server Sorry I wasn't clear about that. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138954 Title: Mounting with NFS over kerberos (krb5p) does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/2138954/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2138954] Re: Mounting with NFS over kerberos (krb5p) does not work
jwcard you mean with the package at version "1:2.6.4-3ubuntu5.1+ppa1" from my test PPA? We're interested in the package version as reported by e.g.: dpkg -l nfs-common -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138954 Title: Mounting with NFS over kerberos (krb5p) does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/2138954/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2138954] Re: Mounting with NFS over kerberos (krb5p) does not work
Hi @simpoir, I noticed that VERSION="24.04.4 LTS (Noble Numbat)" works now. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138954 Title: Mounting with NFS over kerberos (krb5p) does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/2138954/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2138954] Re: Mounting with NFS over kerberos (krb5p) does not work
I'll give it a try. Sorry for the delay. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138954 Title: Mounting with NFS over kerberos (krb5p) does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/2138954/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2138954] Re: Mounting with NFS over kerberos (krb5p) does not work
There is an easy way to figure this out. I've got a PPA build with aforementioned patch. https://launchpad.net/~simpoir/+archive/ubuntu/proposed/+packages If you have an environment in which you can test it, let me know if that does it. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138954 Title: Mounting with NFS over kerberos (krb5p) does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/2138954/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2138954] Re: Mounting with NFS over kerberos (krb5p) does not work
James, scanning the changelog entries you posted for changes between the Oracle Linux nfs-utils version that didn't work and the newer one that does, only one item really stands out as likely to be relevant: - gssd: do not use krb5_cc_initialize (RHEL-85412) Searching for that change in the git history for nfs-utils (https://salsa.debian.org/kernel-team/nfs-utils) turns up this commit: commit 1cd9e3c0d290646e80750249914396566dd6b800 Author: Olga Kornievskaia Date: Mon Mar 24 08:43:43 2025 -0400 gssd: do not use krb5_cc_initialize When gssd refreshes machine credentials, it uses the krb5_get_init_creds_keytab() and then to save the received credentials in a ticket cache, it proceeds to initialize the credential cache via a krb5_cc_initialize() before storing the received credentials into it. krb5_cc_initialize() is not concurrency safe. two gssd upcalls by uid=0, one for krb5i auth flavor and another for krb5p, would enter into krb5_cc_initialize() and one of them would fail, leading to an upcall failure and NFS operation error. Instead it was proposed that gssd changes its design to do what kinit does and forgo the use of krb5_cc_initialize and instead setup the output cache via krb5_get_init_creds_opt_set_out_cache() prior to calling krb5_get_init_creds_keytab() which would then store credentials automatically. https://mailman.mit.edu/pipermail/krbdev/2025-February/013708.html Signed-off-by: Olga Kornievskaia Signed-off-by: Steve Dickson It appears this was added in upstream/2.8.3 and backported by Red Hat to their 2.5.4-37. I wonder if applying that change to the version of nfs-utils in Ubuntu 24.04 would resolve the issue there, too. (Or maybe I'm way off base --- making a lot of assuptions here.) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138954 Title: Mounting with NFS over kerberos (krb5p) does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/2138954/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2138954] Re: Mounting with NFS over kerberos (krb5p) does not work
I did install Ubuntu 25.10 and was able to succeed. Ubuntu 22.04.5 LTS 1.19.2 nfs-common_1%3a2.6.1-1ubuntu1.2_amd64.deb 5.15.0-164-generic Success --- Ubuntu 24.04.3 LTS 1.20.1 nfs-common_1%3a2.6.4-3ubuntu5.1_amd64.deb 6.8.0-90-generic mount.nfs4: access denied by server while mounting vm-001-4269.maas.eng.exagrid.com:/hub --- Ubuntu 25.10 1.21.3 nfs-common_1%3a2.6.1-1ubuntu1.2_amd64.deb 6.17.0-14-generic Success -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138954 Title: Mounting with NFS over kerberos (krb5p) does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/2138954/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2138954] Re: Mounting with NFS over kerberos (krb5p) does not work
Also, I saw something similar with Oracle Linux Server 9.5. Upgrading from nfs-utils-2.5.4-34.0.1.el9.x86_64.rpm to nfs- utils-2.5.4-38.0.1.el9.x86_64.rpm fixed that. [root@jc-oracle-linux ~]# rpm -q --changelog nfs-utils * Wed Aug 06 2025 Akshata Konala 2.5.4-38.0.1 - spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 36044562] * Thu Jun 12 2025 Scott Mayhew 2.5.4-38 - ensure services are stopped when nfs-utils is uninstalled (RHEL-88422) * Sat Apr 26 2025 Steve Dickson 2.5.4-37 - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408) - gssd: do not use krb5_cc_initialize (RHEL-85412) * Fri Apr 25 2025 Steve Dickson 2.5.4-36 - mountstats: verify that old and new types are the same (RHEL-88553) * Tue Apr 22 2025 Steve Dickson 2.5.4-35 - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143) - nfsd: allow more than 64 backlogged connections (RHEL-87752) * Sun Feb 16 2025 Steve Dickson 2.5.4-34 - mountstats/nfsiostat: bugfixes for iostat (RHEL-72243) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138954 Title: Mounting with NFS over kerberos (krb5p) does not work To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/2138954/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
