[Bug 293705] Re: expired kerberos credentials cause significant syslog spam

[Bug Watch Updater]

** Changed in: nfs-utils (openSUSE)
   Importance: Medium => Critical

** Bug watch added: Novell/SUSE Bugzilla #705470
   https://bugzilla.novell.com/show_bug.cgi?id=705470

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to nfs-utils in Ubuntu.
https://bugs.launchpad.net/bugs/293705

Title:
  expired kerberos credentials cause significant syslog spam

Status in “nfs-utils” package in Ubuntu:
  Fix Released
Status in “nfs-utils” source package in Hardy:
  Fix Released
Status in “nfs-utils” source package in Intrepid:
  Won't Fix
Status in “nfs-utils” package in openSUSE:
  Fix Released

Bug description:
  This bug can cause an installation's filesystem to fill up due to
  excessive logging by rpc.gssd, when the user's Kerberos credentials
  have expired and they have /home mounted via Kerberised NFS.

  An explanation of how the bug has been addressed in the development
  branch, including the relevant version numbers of packages modified in
  order to implement the fix.

  This bug has been fixed in the development branch, by way of a patch
  (fixed in 1:1.1.2-4ubuntu2)

  The patch is attached to this bug report.

  TEST CASE: have a system that mounts /home via Kerberised NFS.
  kdestroy. Wait ~15 minutes for rpc.gssd's cached credentials to
  expire. Perform activities that attempt to access files in $HOME. Much
  logging like what is below will occur.

  This is a very simple patch. The potential for regression is slim, as
  all this patch does is decrease the logging verbosity of a few
  messages below that of normal operation.

  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/293705/+subscriptions