[Bug 293705] Re: expired kerberos credentials cause significant syslog spam

[Martin Pitt]

Looks good, thanks! Please upload with fixed target ("hardy-proposed")
and version number ("1:1.1.2-2ubuntu2.4", on top of the current
1:1.1.2-2ubuntu2.3 in proposed).

-- 
expired kerberos credentials cause significant syslog spam
https://bugs.launchpad.net/bugs/293705
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in “nfs-utils” package in Ubuntu: Fix Released
Status in “nfs-utils” source package in Hardy: Fix Committed
Status in “nfs-utils” source package in Intrepid: Won't Fix

Bug description:
This bug can cause an installation's filesystem to fill up due to excessive logging by rpc.gssd, when the user's Kerberos credentials have expired and they have /home mounted via Kerberised NFS.

An explanation of how the bug has been addressed in the development branch, including the relevant version numbers of packages modified in order to implement the fix.

This bug has been fixed in the development branch, by way of a patch (fixed in 1:1.1.2-4ubuntu2)

The patch is attached to this bug report.

TEST CASE: have a system that mounts /home via Kerberised NFS. kdestroy. Wait ~15 minutes for rpc.gssd's cached credentials to expire. Perform activities that attempt to access files in $HOME. Much logging like what is below will occur.

This is a very simple patch. The potential for regression is slim, as all this patch does is decrease the logging verbosity of a few messages below that of normal operation.

Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found