Failed to create krb5 context for user with uid 500 for server server.localdomain - NFS

This is a discussion on Failed to create krb5 context for user with uid 500 for server server.localdomain - NFS ; I mounted a directory as root: mount -t nfs -o sec=krb5,proto=tcp,hard,intr server.localdomain:/nfs /import/nfs Then as user jshellman (uid: 500) I try to: ls /import/nfs It hangs forever and on the client, I see (ran the rpc's with -v -v -v): ...

+ Reply to Thread
Results 1 to 2 of 2

Thread: Failed to create krb5 context for user with uid 500 for server server.localdomain

  1. Failed to create krb5 context for user with uid 500 for server server.localdomain

    I mounted a directory as root:

    mount -t nfs -o sec=krb5,proto=tcp,hard,intr server.localdomain:/nfs
    /import/nfs

    Then as user jshellman (uid: 500) I try to:

    ls /import/nfs

    It hangs forever and on the client, I see (ran the rpc's with -v -v
    -v):

    Feb 20 12:31:27 192 rpc.gssd[6883]: handling krb5 upcall
    Feb 20 12:31:27 192 rpc.gssd[6883]: getting credentials for client with
    uid 500 for server server.localdomain
    Feb 20 12:31:27 192 rpc.gssd[6883]: CC file 'krb5cc_500' being
    considered
    Feb 20 12:31:27 192 rpc.gssd[6883]: CC file 'krb5cc_500' matches name
    check and has mtime of 1140456351
    Feb 20 12:31:27 192 rpc.gssd[6883]: CC file
    'krb5cc_machine_LOCALDOMAIN' being considered
    Feb 20 12:31:27 192 rpc.gssd[6883]: CC file 'krb5cc_0' being considered
    Feb 20 12:31:27 192 rpc.gssd[6883]: using FILE:/tmp/krb5cc_500 as
    credentials cache for client with uid 500 for server server.localdomain
    Feb 20 12:31:27 192 rpc.gssd[6883]: creating context using euid 500
    (save_uid 0)
    Feb 20 12:31:27 192 rpc.gssd[6883]: creating tcp client for server
    server.localdomain
    Feb 20 12:31:27 192 rpc.gssd[6883]: creating context with server
    nfs@server.localdomain
    Feb 20 12:31:27 192 rpc.gssd[6883]: rpcsec_gss: in
    authgss_create_default()
    Feb 20 12:31:27 192 rpc.gssd[6883]: rpcsec_gss: in authgss_create()
    Feb 20 12:31:27 192 rpc.gssd[6883]: rpcsec_gss: in authgss_refresh()
    Feb 20 12:31:27 192 rpc.gssd[6883]: rpcsec_gss: in authgss_marshal()
    Feb 20 12:31:27 192 rpc.gssd[6883]: rpcsec_gss: xdr_rpc_gss_cred:
    encode success (v 1, proc 1, seq 0, svc 1, ctx (nil):0)
    Feb 20 12:31:27 192 rpc.gssd[6883]: rpcsec_gss: xdr_rpc_gss_init_args:
    encode success (token 0x9cc1e88:526)
    Feb 20 12:31:52 192 rpc.gssd[6883]: WARNING: Failed to create krb5
    context for user with uid 500 for server server.localdomain
    Feb 20 12:31:52 192 rpc.gssd[6883]: WARNING: Failed to create krb5
    context for user with uid 500 for server server.localdomain
    Feb 20 12:31:52 192 rpc.gssd[6883]: doing error downcall

    On the server, I see:

    Feb 20 12:41:42 server rpc.svcgssd[4284]: leaving poll
    Feb 20 12:41:42 server rpc.svcgssd[4284]: handling null request
    Feb 20 12:41:42 server rpc.svcgssd[4284]:
    Feb 20 12:41:42 server rpc.svcgssd[4284]: in_handle:
    Feb 20 12:41:42 server rpc.svcgssd[4284]: length 0
    Feb 20 12:41:42 server rpc.svcgssd[4284]:
    Feb 20 12:41:42 server rpc.svcgssd[4284]: in_tok:
    Feb 20 12:41:42 server rpc.svcgssd[4284]: length 526
    Feb 20 12:41:42 server rpc.svcgssd[4284]:
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0000: 6082 020a 0609 2a86
    4886 f712 0102 0201 `.....*.H.......
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0010: 006e 8201 f930 8201
    f5a0 0302 0105 a103 .n...0..........
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0020: 0201 0ea2 0703 0500
    2000 0000 a382 0111 ........ .......
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0030: 6182 010d 3082 0109
    a003 0201 05a1 0d1b a...0...........
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0040: 0b4c 4f43 414c 444f
    4d41 494e a224 3022 .LOCALDOMAIN.$0"
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0050: a003 0201 03a1 1b30
    191b 036e 6673 1b12 .......0...nfs..
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0060: 7365 7276 6572 2e6c
    6f63 616c 646f 6d61 server.localdoma
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0070: 696e a381 cc30 81c9
    a003 0201 17a1 0302 in...0..........
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0080: 0103 a281 bc04 81b9
    5903 d67b 4311 771a ........Y..{C.w.
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0090: 7547 89ff 8018 8eba
    2309 bf27 bf19 9288 uG......#..'....
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 00a0: a825 d3f9 dd6b f45a
    b068 b1ef 8867 78fa .%...k.Z.h...gx.
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 00b0: 8712 4031 aaa1 5698
    59de 8a6c 96c8 0cdb ..@1..V.Y..l....
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 00c0: b0e1 44aa f31a 13e7
    262f 22d2 c36c 11ec ..D.....&/"..l..
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 00d0: 5dda 2ca8 ec48 4697
    f3ff 9f8f 78ad 2c8e ].,..HF.....x.,.
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 00e0: b036 0e91 5c58 b34b
    9f34 64ae 2958 f4bf .6..\X.K.4d.)X..
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 00f0: 87e5 6371 2bd4 da9d
    f0e8 3f18 fba3 b088 ..cq+.....?.....
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0100: 75b8 f56a 340e 5c75
    81ee cd66 ae6b c4a4 u..j4.\u...f.k..
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0110: c3d5 9fbc b0d4 84f3
    09b9 4a13 f3b7 91e8 ..........J.....
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0120: eef1 95eb 8b5c 4a21
    7a66 8a18 5922 cf67 .....\J!zf..Y".g
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0130: 0e47 2bc4 31e9 db16
    2787 4708 3e8a bcf3 .G+.1...'.G.>...
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0140: 73a4 81ca 3081 c7a0
    0302 0110 a281 bf04 s...0...........
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0150: 81bc 1852 124c 9a5e
    9394 eed4 4972 a994 ...R.L.^....Ir..
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0160: 33ce b09a d367 80e3
    7b8e 22d7 d418 3e51 3....g..{."...>Q
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0170: 1d13 e2c8 f8a9 a3fb
    25ef 0439 1269 9b21 ........%..9.i.!
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0180: d80b 7c72 6a45 a005
    e792 ddda d88c f76a ..|rjE.........j
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0190: 9c20 b5b3 c5a6 ccfa
    3ae2 98de d4eb a98d . ......:.......
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 01a0: f912 4bfa d8b5 e68f
    e721 b896 b556 be6b ..K......!...V.k
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 01b0: 6bdf 4ae4 7b6b 59da
    4ee8 e0a8 611c 29da k.J.{kY.N...a.).
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 01c0: a315 8a9b f6d2 6f30
    88a7 487d 44d0 8f99 ......o0..H}D...
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 01d0: 45c4 53c3 2e7b 830d
    d952 989d cf0d 5033 E.S..{...R....P3
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 01e0: efb7 c088 f3dd ab4e
    adf5 9cbc b14f 59d0 .......N.....OY.
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 01f0: dec3 c14e ca93 3155
    b0f7 9a9b 58e3 65a4 ...N..1U....X.e.
    Feb 20 12:41:42 server rpc.svcgssd[4284]: 0200: 6da5 e769 5bc6 3511
    49a9 5a34 8d8c m..i[.5.I.Z4..
    Feb 20 12:41:42 server rpc.svcgssd[4284]: sname = jshellman@LOCALDOMAIN
    Feb 20 12:41:42 server rpc.svcgssd[4284]: doing downcall
    Feb 20 12:41:42 server rpc.svcgssd[4284]: \x03000000 2147483647 500 500
    0 krb5
    \x000000000000000000000000000000000000000000000000 0400000002000000fc4cfb43b3020823090000002a864886f7 120102020600000018000000e6ce4961106b1a3bcb4af4fb9d 16254c988af2ab3e3862430600000018000000e6ce4961106b 1a3bcb4af4fb9d16254c988af2ab3e386243
    Feb 20 12:41:42 server rpc.svcgssd[4284]: sending null reply
    Feb 20 12:41:42 server rpc.svcgssd[4284]:
    Feb 20 12:41:42 server rpc.svcgssd[4284]: finished handling null
    request
    Feb 20 12:41:42 server rpc.svcgssd[4284]: entering poll


  2. Re: Failed to create krb5 context for user with uid 500 for server server.localdomain

    In article <1140457517.151270.107950@g44g2000cwa.googlegroups. com>,
    jshellman@gmail.com wrote:
    >I mounted a directory as root:
    >
    >mount -t nfs -o sec=krb5,proto=tcp,hard,intr server.localdomain:/nfs


    Kerberos is a disaster area. Many versions do not work correctly if
    the systems have more than one network interface - I am not joking!


    Regards,
    Nick Maclaren.

+ Reply to Thread