Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 21 Sep 2025 13:51:33 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 289734] panic tcp_usr_close while running mount command after configure NFS over TLS
Message-ID:  <bug-289734-7501-GTVExaM4b9@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-289734-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-289734-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D289734

Rick Macklem <rmacklem@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |rmacklem@FreeBSD.org

--- Comment #1 from Rick Macklem <rmacklem@FreeBSD.org> ---
(In reply to Wafa Hamzah from comment #0)
I haven't looked at the crash yet, but here
are a few configuration related comments:

V4: / -sec=3Dsys:krb5p:tls
There should be an error in /var/log/messages
for the above. It should look like:
V4: / -sec=3Dsys:krb5p -tls  (You only need krb5p if clients
are going to be doing sec=3Dkrb5p mounts. Also, you always
want "krb5i" as well for Linux clients because they sometimes
use "krb5i" even when you've specified "krb5p".)

Run the following command:
 # rpc.tlsservd
This suggests you didn't reboot after doing the configuration.
(Although rebooting should not be necessary, there are ordering
dependencies w.r.t. the various server daemons, so you should
(re)start all of them after setting the configuration and rebooting
is the easy way to do so.)
--> This might be why you are getting the crashes.

mount -o tls 13.0.0.2:/tmp /mnt
This is an NFSv3 mount. It should work, although I'll admit I
haven't tested using NFS-over-TLS for NFSv3 recently.
(It is a recently adopted feature aimed at NFSv4.)
--> Again, this might explain why you are getting crashes.

I will try an NFSv3 mount in a few days (I'm not at home
right now) and see if I can reproduce the crash.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-289734-7501-GTVExaM4b9>