Re: [gssproxy] gssproxy stopped working after upgrade to fedora 21.

[Simo Sorce]

On Sat, 13 Dec 2014 21:03:32 +0100
Rob Verduijn <rob.verduijn(a)gmail.com&gt; wrote:

>  Hello,
>  
>  I'ev recently upgraded my vm to fedora 21.
>  Besides a little struggle with nfs (had to replace nfs.target with
>  nfs-client.target) everything was up and running.
>  
>  Except gssproxy.
>  
>  I checked kvno,time,paths,cache and some more
>  The nfs4 mounts work for a real user.
>  
>  Thing I noticed:
>  The cache files no longer appear in /var/lib/gssproxy/clients
>  the kdc logs show nothing when I try to access the mount with the
>  apache account.
>  the local logs also show nothing even though I set debug=true
>  
>  Any ideas on how to proceed with this one ? 
Is GSS-Proxy enabled at all in /etc/sysconfig/nfs ?

Simo.

>  Rob
>  
>  gssproxy.conf :
>  [gssproxy]
>  
>  [service/squeezebox]
>    mechs = krb5
>    cred_store = ccache:FILE:/var/lib/gssproxy/clients/krb5cc_squeezebox
>    cred_store = client_keytab:/etc/gssproxy/clients/squeezebox.keytab
>    cred_usage = initiate
>    euid = 997
>    debug = true
>  
>  [service/apache]
>    mechs = krb5
>    cred_store = ccache:FILE:/var/lib/gssproxy/clients/krb5cc_apache
>    cred_store = client_keytab:/etc/gssproxy/clients/apache.keytab
>    cred_usage = initiate
>    euid = 48
>    debug = true 


-- 
Simo Sorce * Red Hat, Inc * New York