search for: gssproxy

Hi, folks, Especially Johnny - could you possibly push this fix through as soon as upstream puts it out? It's a real issue for us - we've had a number of servers whether gssproxy keeps SEGVing, which hits NFS and samba. Thanks in advance. mark ---------------------------- Original Message ---------------------------- Subject: [Bug 1699331] gssproxy segmentation fault From: bugzilla at redhat.com Date: Wed, May 1, 2019 13:19 To: m.roth at 5-cent.us...

Hi, Johnny, Johnny Hughes wrote: > On 5/2/19 9:15 AM, mark wrote: >> >> Especially Johnny - could you possibly push this fix through as soon as >> upstream puts it out? It's a real issue for us - we've had a number of >> servers whether gssproxy keeps SEGVing, which hits NFS and samba. > > See if this fixes your issues .. if do, let me know and we can get it > released into the fasttrack repo: > > https://buildlogs.centos.org/c7-fasttrack.x86_64/gssproxy/ > > Note: This packages are unsigned and if it fixes your issue...

Hi, Johnny, Johnny Hughes wrote: > On 5/2/19 9:15 AM, mark wrote: >> >> Especially Johnny - could you possibly push this fix through as soon as >> upstream puts it out? It's a real issue for us - we've had a number of >> servers whether gssproxy keeps SEGVing, which hits NFS and samba. > > See if this fixes your issues .. if do, let me know and we can get it > released into the fasttrack repo: > > https://buildlogs.centos.org/c7-fasttrack.x86_64/gssproxy/ > > > Note: This packages are unsigned and if it fixes your...

Hi, I've been working on some systems trying to get kerberized nfsv4 and kerberized web services going on 7. Kerberized nfsv4 was working with 7.0, but with the 7.1 release it stopped working, the key difference between the two setups is that gssproxy wasn't being used with 7.0, but seems to be key with 7.1. The problem I am encountering with Kerberized NFSv4 is that the directory will mount okay, and I can see it's contents as root, but I encounter "Permission denied" errors when trying to access it as a regular user. 'k...

...I am seeing today because I really hope to solve the narrow issue of SMB file access without delving too far into the proper long-term fixes we require. I can see now that authentication works fine and I can access shares on the local filesystem. What seems to be failing is the mount performed by gssproxy when trying to access a share. The NFS server isn't kerberized so the Samba server should be mounting everything with the sys mount option, but gssproxy appears to only perform mounts with krb5. When I try to access even an already-mounted NFS directory to which I have permission, gssproxy co...

Ok, folks, I brought this up some time ago, and got no replies. We have a good number of systems - > 100 - and we use sssd. On the C 7 boxen, which is most of them, gssproxy *frequently* (like once a day or so) dies with a SEGV. It restarts fine. Dies again eventually. ARE other people seeing this? If so, I guess we get to file a bug report with upstream. Speaking as an old C programmer, dying with a SEGV? Really? In production? mark

On 5/2/19 9:15 AM, mark wrote: > Hi, folks, > > Especially Johnny - could you possibly push this fix through as soon as > upstream puts it out? It's a real issue for us - we've had a number of > servers whether gssproxy keeps SEGVing, which hits NFS and samba. > Mark, See if this fixes your issues .. if do, let me know and we can get it released into the fasttrack repo: https://buildlogs.centos.org/c7-fasttrack.x86_64/gssproxy/ Note: This packages are unsigned and if it fixes your issue, I'll sign and...

...rrata and Bugfix Advisory 2016:1527 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-1527.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 6a9a1160f894ed26bbdf4ca9ea1565fd5b28195000bdb3a2dc1945fc76c59e66 gssproxy-0.4.1-8.el7_2.x86_64.rpm Source: 425c2bf9b64155e192d0f4bfa8b09887e03341e6f98d2e6833b8682f17d8cab6 gssproxy-0.4.1-8.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net Twitter: @JohnnyCentOS

Erik Laxdal wrote: > Hi, > > I've been working on some systems trying to get kerberized nfsv4 and > kerberized web services going on 7. Kerberized nfsv4 was working with > 7.0, but with the 7.1 release it stopped working, the key difference > between the two setups is that gssproxy wasn't being used with 7.0, but > seems to be key with 7.1. > > The problem I am encountering with Kerberized NFSv4 is that the > directory will mount okay, and I can see it's contents as root, but I > encounter "Permission denied" errors when trying to access it as...

On 1/25/19 10:27 AM, mark wrote: > Ok, folks, > > I brought this up some time ago, and got no replies. We have a good > number of systems - > 100 - and we use sssd. On the C 7 boxen, which is > most of them, gssproxy *frequently* (like once a day or so) dies with a > SEGV. It restarts fine. Dies again eventually. > > ARE other people seeing this? If so, I guess we get to file a bug > report with upstream. Speaking as an old C programmer, dying with a > SEGV? Really? In production? > >...

...e I really hope to solve the narrow issue of SMB file > access without delving too far into the proper long-term fixes we require. > > I can see now that authentication works fine and I can access shares on the > local filesystem. What seems to be failing is the mount performed by > gssproxy when trying to access a share. The NFS server isn't kerberized so > the Samba server should be mounting everything with the sys mount option, > but gssproxy appears to only perform mounts with krb5. When I try to > access even an already-mounted NFS directory to which I have permissi...

...nny via samba wrote: >> On 11/11/2020 10:54, Jason Keltz via samba wrote: >>> Hi Louis, >>> I've looked into that and I'm not sure how this would be done? >>> By the way, even with your NFS translation fix (which doesn't work >>> for me because gssproxy), do you do this before accessing root files..? >>> sudo root >>> kinit -k 'host$' >>> >> OK, after a bit of a battle, I now have a Centos 7 Unix domain member >> mounting an NFS share from a Devuan NFS4 server. >> >> The actual mount wasn...

Hi Rowland, Currently Domain Users doesn't have a gidNumber because it didn't have a corresponding group in OpenLDAP, which is our master directory. The primary Unix group gidNumber for each user is replicated from their OpenLDAP records, but the AD groups have a suffix due to historical name collisions - a POSIX group called harry would be harry-group in AD, but with a matching

...11/11/2020 10:54, Jason Keltz via samba wrote: >>>>> Hi Louis, >>>>> I've looked into that and I'm not sure how this would be done? >>>>> By the way, even with your NFS translation fix (which doesn't work >>>>> for me because gssproxy), do you do this before accessing root >>>>> files..? >>>>> sudo root >>>>> kinit -k 'host$' >>>>> >>>> OK, after a bit of a battle, I now have a Centos 7 Unix domain >>>> member mounting an NFS share from...

> > When I try to > > access even an already-mounted NFS directory to which I have permission, > > gssproxy complains: > > > > Jul 10 08:55:51 smb gssproxy: gssproxy[1469]: (OID: { 1 2 840 113554 1 2 > 2 > > }) Unspecified GSS failure. Minor code may provide more information, > > Client 'host/smb.soe.ucsc.edu at AD.SOE.UCSC.EDU' not found in Kerberos > > database...

...>>> On 11/11/2020 10:54, Jason Keltz via samba wrote: >>>> Hi Louis, >>>> I've looked into that and I'm not sure how this would be done? >>>> By the way, even with your NFS translation fix (which doesn't work >>>> for me because gssproxy), do you do this before accessing root >>>> files..? >>>> sudo root >>>> kinit -k 'host$' >>>> >>> OK, after a bit of a battle, I now have a Centos 7 Unix domain >>> member mounting an NFS share from a Devuan NFS4 server. &...

On 11/11/2020 10:54, Jason Keltz via samba wrote: > Hi Louis, > I've looked into that and I'm not sure how this would be done? > By the way, even with your NFS translation fix (which doesn't work for me because gssproxy), do you do this before accessing root files..? > sudo root > kinit -k 'host$' > OK, after a bit of a battle, I now have a Centos 7 Unix domain member mounting an NFS share from a Devuan NFS4 server. The actual mount wasn't a problem, it was getting the NFS server to work ?...

...already have NFS working completely. I'm only > >> trying to work out root NFS access on the client.? I tried > >> your NFS translation fix via idmapd.conf? but that isn't > >> working for me. I've discovered that's because CentOS 7 is > >> using gssproxy so apparently your fix won't work. The fix > >> from Red Hat (adding some lines to krb.conf seen in my > >> original email) is not working either.? I'll keep working > >> away at it.?? When you're testing as root I guess you use the > >> machine crede...

Hi Louis, Thanks for your message. However, I already have NFS working completely. I'm only trying to work out root NFS access on the client.? I tried your NFS translation fix via idmapd.conf? but that isn't working for me. I've discovered that's because CentOS 7 is using gssproxy so apparently your fix won't work. The fix from Red Hat (adding some lines to krb.conf seen in my original email) is not working either.? I'll keep working away at it.?? When you're testing as root I guess you use the machine credential? That didn't work for me either. Jason. On...

Hi Louis, I've looked into that and I'm not sure how this would be done? By the way, even with your NFS translation fix (which doesn't work for me because gssproxy), do you do this before accessing root files..? sudo root kinit -k 'host$' ? Jason. On Nov. 11, 2020, 2:48 a.m., at 2:48 a.m., "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: >Hai Jason, > >Hmm, yes, well, only one thing i can think of now is >...