[Bug 938581] Re: rpc.svcgssd ERROR: prepare_krb5_rfc_cfx_buffer: not implemented

[Krzysztof Klimonda]

Lucid kernel doesn't support all the encryption types that the later
kernels (like the one from 11.10 or 12.04) support. Because of that, and
some bugs/missing code in lucid krb5/nfs-utils packages, NFSv4 server,
KDC server, and the client can't agree on the correct encryption type to
use when exchanging Kerberos tickets.

Now, it's not really a new issue - even when trying to connect 10.04
client to 10.04 server you had to set allow_weak_crypto,
default_tgs_enctypes and default_tkt_enctypes so you could mount
"kerberized" NFSv4 shares, but now it appears that it's not enough.

In my case, the workaround was to force des-cbc-crc encryption type on
the server by setting "permitted_enctypes = des-cbc-crc" in
/etc/krb5.conf, under [libdefaults] section.

I may try backporting fixes mentioned in http://bugs.debian.org/cgi-
bin/bugreport.cgi?bug=622146 to lucid to see if it helps a bit.

I'm gong to leave the bug as affectign nfs-utils for now, and change its
importance and status based on what I've found out so far. If I can
confirm that patches from the debian bug work (and so that both bugs are
actually the same) I'll link the debian bug, add krb5 package, and try
talking with developers on preparing an SRU if possible.

** Bug watch added: Debian Bug tracker #622146
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622146

** Changed in: nfs-utils (Ubuntu)
   Importance: Undecided => Low

** Changed in: nfs-utils (Ubuntu)
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to nfs-utils in Ubuntu.
https://bugs.launchpad.net/bugs/938581

Title:
  rpc.svcgssd ERROR: prepare_krb5_rfc_cfx_buffer: not implemented

Status in “nfs-utils” package in Ubuntu:
  Triaged

Bug description:
  Since upgrading one of the machines in my network to oneiric this
  lucid machine as been complaining:

  03:43:43 rpc.svcgssd ERROR: prepare_krb5_rfc_cfx_buffer: not implemented
  03:43:43 rpc.svcgssd ERROR: failed serializing krb5 context for kernel
  03:43:43 rpc.svcgssd WARNING: handle_nullreq: serialize_context_for_kernel failed
  03:43:43 rpc.svcgssd ERROR: prepare_krb5_rfc_cfx_buffer: not implemented
  03:43:43 rpc.svcgssd ERROR: failed serializing krb5 context for kernel
  03:43:43 rpc.svcgssd WARNING: handle_nullreq: serialize_context_for_kernel failed
  03:45:58 rpc.svcgssd ERROR: prepare_krb5_rfc_cfx_buffer: not implemented
  03:45:58 rpc.svcgssd ERROR: failed serializing krb5 context for kernel
  03:45:58 rpc.svcgssd WARNING: handle_nullreq: serialize_context_for_kernel failed
  03:45:58 rpc.svcgssd ERROR: prepare_krb5_rfc_cfx_buffer: not implemented
  03:45:58 rpc.svcgssd ERROR: failed serializing krb5 context for kernel
  03:45:58 rpc.svcgssd WARNING: handle_nullreq: serialize_context_for_kernel failed
  03:47:59 rpc.svcgssd ERROR: prepare_krb5_rfc_cfx_buffer: not implemented
  03:47:59 rpc.svcgssd ERROR: failed serializing krb5 context for kernel
  03:47:59 rpc.svcgssd WARNING: handle_nullreq: serialize_context_for_kernel failed
  03:47:59 rpc.svcgssd ERROR: prepare_krb5_rfc_cfx_buffer: not implemented
  03:47:59 rpc.svcgssd ERROR: failed serializing krb5 context for kernel
  03:47:59 rpc.svcgssd WARNING: handle_nullreq: serialize_context_for_kernel failed

  ProblemType: Bug
  DistroRelease: Ubuntu 10.04
  Package: nfs-kernel-server 1:1.2.0-4ubuntu4.2
  ProcVersionSignature: Ubuntu 2.6.32-22.36-generic 2.6.32.11+drm33.2
  Uname: Linux 2.6.32-22-generic i686
  Architecture: i386
  Date: Wed Feb 22 06:41:12 2012
  ProcEnviron:
   LANG=en_CA.UTF-8
   SHELL=/bin/bash
  SourcePackage: nfs-utils

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/938581/+subscriptions