Re: Possible bug in NFSv4 with krb5p security?

Doug Rabson wrote:
> On 16 February 2013 13:57, Elias Mårtenson <lokedhs_at_gmail.com> wrote:
> 
> > On 16 February 2013 18:58, Doug Rabson <dfr_at_rabson.org> wrote:
> >
> >> This may be a stupid question but does the user 'elias' exist in
> >> the
> >> local password database?
> >>
> >> If you are using heimdal from the base distribution and you have
> >> source,
> >> you should be able to build them with debug information which may
> >> help.
> >> When I was writing gssd, I mostly ran it under gdb to debug
> >> problems like
> >> this. To build something in the base with debug information, go to
> >> the
> >> directory in the source tree for that component and type something
> >> like
> >> 'make DEBUG_FLAGS=-g clean all install'.
> >>
> >
> > No worries. I do have that user (and everything else, specifically
> > single
> > sign-on ssh) works with it. I do agree that if I had not that user,
> > the
> > behaviour I see would be neatly explained.
> >
> > When it comes to gssd, I've got its behaviour pretty well nailed
> > down. It
> > does what it's supposed to do.
> >
> > However, when I tried rebuilding libgssapi.so.10, I ended up with
> > gssd
> > hanging when it used the new library. I have no idea why.
> >
> > Would it be wise to upgrade from 9.1-RELEASE to something newer?
> > I've seen
> > references to 10-CURRENT. I'd like to be debugging the latest
> > version of
> > everything, but this machine also needs to serve as a fileserver for
> > my
> > home office, so some degree of stability is needed.
> >
> >
> I don't think much (if anything) has changed with gssd between 9.1 and
> current.
Nothing that would affect this, as far as I know. The changes were done
to add support for searching for credential cache files with different
names. This should affect client side behaviour only and only if the
new command line options are used to enable this code.

> When your gssd hangs, you can try to get a stack trace using
> gdb's
> attach command.
> 
> 
> 
> > Regards,
> > Elias
> >
> _______________________________________________
> freebsd-current_at_freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to
> "freebsd-current-unsubscribe_at_freebsd.org"