Date: Tue, 12 Feb 2019 00:27:00 +0000 From: bugzilla-noreply@freebsd.org To: fs@FreeBSD.org Subject: [Bug 235582] rpc_svc_gss / nfsd kernel panic Message-ID: <bug-235582-3630-KNvGCHujAb@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-235582-3630@https.bugs.freebsd.org/bugzilla/> References: <bug-235582-3630@https.bugs.freebsd.org/bugzilla/>
index | next in thread | previous in thread | raw e-mail
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=235582 --- Comment #20 from Rick Macklem <rmacklem@FreeBSD.org> --- Well, if you have NFS client(s) mounted with more than CLIENT_MAX different users actively using the mount concurrently, that might tickle the race? - Basically, this code (which handles a new credential creation) happens when there is a miss on the cache of credentials (which is capped at CLIENT_MAX), where each distinct user (as in uid) would need a credential. --> Conversely, making CLIENT_MAX >= the maximum # of different uids actively using the file system might reduce the likelyhood of the crash, since this code would be executed less frequently. Related to Ben's comment (thanks for the nice description of the name): - It did tickle a rusty brain cell. I think I was confusing gss_export_name() with gss_display_name(). Unfortunately, this isn't very useful, since neither gss_display_name() nor gss_localname() are supported by the KGSSAPI. If you search for "_svc" in usr.sbin/gssd/gssd.c, you'll see the rather small list of gssapi functions supported by the KGSSAPI (unless I've misread this code). - I think the structure is called "Principal" (also called "krb5_principal_data"). It seems to be defined in krb5_asn1.h and that isn't in the kernel either. --> I suspect this is why the logging code enabled via compiling it with DEBUG defined just logs the output of gss_export_name() and doesn't try and extract the components of it? Good luck with your testing, rick -- You are receiving this mail because: You are the assignee for the bug.help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-235582-3630-KNvGCHujAb>