[Bug 293705] Re: expired kerberos credentials cause significant syslog spam

[Matthew L. Dailey]

Martin:

Hopefully, this is what you were after. I added my patch to the nfs-
utils_1.1.2-2ubuntu2.3 version in proposed and fixed the changelog to
reflect the correct version number and target. On our systems, this
builds and installs properly and fixes the verbosity issues in this bug.

Thanks for your help - let me know if you have any questions or if I've
messed anything up. :-)

** Attachment added: "hardy-proposed debdiff against nfs-utils_1.1.2-2ubuntu2.3"
   http://launchpadlibrarian.net/43292204/nfs-utils_1.1.2-2ubuntu2.4.debdiff

-- 
expired kerberos credentials cause significant syslog spam
https://bugs.launchpad.net/bugs/293705
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in “nfs-utils” package in Ubuntu: Fix Released
Status in “nfs-utils” source package in Hardy: Fix Committed
Status in “nfs-utils” source package in Intrepid: Won't Fix

Bug description:
This bug can cause an installation's filesystem to fill up due to excessive logging by rpc.gssd, when the user's Kerberos credentials have expired and they have /home mounted via Kerberised NFS.

An explanation of how the bug has been addressed in the development branch, including the relevant version numbers of packages modified in order to implement the fix.

This bug has been fixed in the development branch, by way of a patch (fixed in 1:1.1.2-4ubuntu2)

The patch is attached to this bug report.

TEST CASE: have a system that mounts /home via Kerberised NFS. kdestroy. Wait ~15 minutes for rpc.gssd's cached credentials to expire. Perform activities that attempt to access files in $HOME. Much logging like what is below will occur.

This is a very simple patch. The potential for regression is slim, as all this patch does is decrease the logging verbosity of a few messages below that of normal operation.

Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found
Oct  8 17:05:18 swan rpc.gssd[4747]: WARNING: Failed to create krb5 context for user with uid 85153 for server *REDACTED*
Oct  8 17:05:18 swan rpc.gssd[4747]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure.  Minor code may provide more information - No credentials cache found