[Bug 293705] Re: expired kerberos credentials cause significant syslog spam

[Andrew Pollock]

** Description changed:

+ This bug can cause an installation's filesystem to fill up due to
+ excessive logging by rpc.gssd, when the user's Kerberos credentials have
+ expired and they have /home mounted via Kerberised NFS.
+ 
+ An explanation of how the bug has been addressed in the development
+ branch, including the relevant version numbers of packages modified in
+ order to implement the fix.
+ 
+ This bug has been fixed in the development branch, by way of a patch
+ (fixed in 1:1.1.2-4ubuntu2)
+ 
+ The patch is attached to this bug report.
+ 
+ TEST CASE: have a system that mounts /home via Kerberised NFS. kdestroy.
+ Wait ~15 minutes for rpc.gssd's cached credentials to expire. Perform
+ activities that attempt to access files in $HOME. Much logging like what
+ is below will occur.
+ 
+ This is a very simple patch. The potential for regression is slim, as
+ all this patch does is decrease the logging verbosity of a few messages
+ below that of normal operation.
+ 
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
  Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
  Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found

-- 
expired kerberos credentials cause significant syslog spam
https://bugs.launchpad.net/bugs/293705
You received this bug notification because you are a member of Ubuntu
Sponsors for main, which is a direct subscriber.