From owner-freebsd-fs@FreeBSD.ORG Tue Aug 28 15:21:04 2012 Return-Path: Delivered-To: freebsd-fs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DB265106564A for ; Tue, 28 Aug 2012 15:21:03 +0000 (UTC) (envelope-from attila.bogar@linguamatics.com) Received: from mail.linguamatics.com (mail.linguamatics.com [188.39.80.203]) by mx1.freebsd.org (Postfix) with ESMTP id 57EE48FC1B for ; Tue, 28 Aug 2012 15:21:03 +0000 (UTC) Received: from [10.252.10.232] (random.linguamatics.com [10.252.10.232]) by mail.linguamatics.com (Postfix) with ESMTPSA id 5FC28EFB451 for ; Tue, 28 Aug 2012 16:13:22 +0100 (BST) Message-ID: <503CE012.3040408@linguamatics.com> Date: Tue, 28 Aug 2012 16:13:22 +0100 From: =?ISO-8859-1?Q?Attila_Bog=E1r?= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20120714 Thunderbird/14.0 MIME-Version: 1.0 To: freebsd-fs@FreeBSD.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: Need hints debugging KGSSAPI X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2012 15:21:04 -0000 Hi, I'd like to spend some time finding out myself what's wrong with the kerberized nfs server on the FreeBSD 9-STABLE. I thought the solution is to simply force DES+RFC1964 GSSAPI, but unfortunately it's not that simple. I built a patched nfs-utils package by merging the patch referenced from https://bugzilla.redhat.com/show_bug.cgi?id=802469 - with the legacy option did not resolve the problem. I have some wireshark traces which show that one EL6 box get 3 times auth_denied however the other succeeds for the 3rd time. I can reproduce this. My kernel is a GENERIC + some option as per Rick's page: options KGSSAPI device crypto device cryptodev I know, that all interesting NFS/GSSAPI job is done within kernel space. I suppose it's not possible to unload the KGSSAPI module: http://svnweb.freebsd.org/base/head/sys/kgssapi/gss_impl.c?view=markup&pathrev=224084 What's the best way to debug the kernel other than inserting debug messages into the source tree+recompiling+rebooting? What debugger do you recommend? Is there an up-to-date tutorial on FreeBSD kernel debugging? Any constructive comments appreciated. Thanks, Attila