gssproxy stopped working after upgrade to fedora 21.

[Rob Verduijn]

Hello,

I'ev recently upgraded my vm to fedora 21.
Besides a little struggle with nfs (had to replace nfs.target with
nfs-client.target) everything was up and running.

Except gssproxy.

I checked kvno,time,paths,cache and some more
The nfs4 mounts work for a real user.

Thing I noticed:
The cache files no longer appear in /var/lib/gssproxy/clients
the kdc logs show nothing when I try to access the mount with the apache
account.
the local logs also show nothing even though I set debug=true

Any ideas on how to proceed with this one ?
Rob

gssproxy.conf :
[gssproxy]

[service/squeezebox]
  mechs = krb5
  cred_store = ccache:FILE:/var/lib/gssproxy/clients/krb5cc_squeezebox
  cred_store = client_keytab:/etc/gssproxy/clients/squeezebox.keytab
  cred_usage = initiate
  euid = 997
  debug = true

[service/apache]
  mechs = krb5
  cred_store = ccache:FILE:/var/lib/gssproxy/clients/krb5cc_apache
  cred_store = client_keytab:/etc/gssproxy/clients/apache.keytab
  cred_usage = initiate
  euid = 48
  debug = true

[Simo Sorce]

On Sat, 13 Dec 2014 21:03:32 +0100
Rob Verduijn  wrote:
> Hello,
>
> I'ev recently upgraded my vm to fedora 21.
> Besides a little struggle with nfs (had to replace nfs.target with
> nfs-client.target) everything was up and running.
>
> Except gssproxy.
>
> I checked kvno,time,paths,cache and some more
> The nfs4 mounts work for a real user.
>
> Thing I noticed:
> The cache files no longer appear in /var/lib/gssproxy/clients
> the kdc logs show nothing when I try to access the mount with the
> apache account.
> the local logs also show nothing even though I set debug=true
>
> Any ideas on how to proceed with this one ?

Is GSS-Proxy enabled at all in /etc/sysconfig/nfs ?

Simo.
> Rob
>
> gssproxy.conf :
> [gssproxy]
>
> [service/squeezebox]
>   mechs = krb5
>   cred_store = ccache:FILE:/var/lib/gssproxy/clients/krb5cc_squeezebox
>   cred_store = client_keytab:/etc/gssproxy/clients/squeezebox.keytab
>   cred_usage = initiate
>   euid = 997
>   debug = true
>
> [service/apache]
>   mechs = krb5
>   cred_store = ccache:FILE:/var/lib/gssproxy/clients/krb5cc_apache
>   cred_store = client_keytab:/etc/gssproxy/clients/apache.keytab
>   cred_usage = initiate
>   euid = 48
>   debug = true