From owner-freebsd-bugs@FreeBSD.ORG  Tue Dec 25 14:23:12 2007
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Delivered-To: freebsd-bugs@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 055B916A46C;
	Tue, 25 Dec 2007 14:23:12 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from cyrus.watson.org (cyrus.watson.org [209.31.154.42])
	by mx1.freebsd.org (Postfix) with ESMTP id E533D13C4CE;
	Tue, 25 Dec 2007 14:23:11 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from fledge.watson.org (fledge.watson.org [209.31.154.41])
	by cyrus.watson.org (Postfix) with ESMTP id 6D84D46C0A;
	Tue, 25 Dec 2007 09:23:11 -0500 (EST)
Date: Tue, 25 Dec 2007 14:23:11 +0000 (GMT)
From: Robert Watson <rwatson@FreeBSD.org>
X-X-Sender: robert@fledge.watson.org
To: Daniel Rudy <dcrudy@pacbell.net>
In-Reply-To: <200609201534.k8KFYKoE024077@www.freebsd.org>
Message-ID: <20071225142152.A55818@fledge.watson.org>
References: <200609201534.k8KFYKoE024077@www.freebsd.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: freebsd-bugs@FreeBSD.org, freebsd-gnats-submit@FreeBSD.org
Subject: Re: kern/103432: panic: nfssvc_nfsd(): debug.mpsafenet=1 && Giant
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Dec 2007 14:23:12 -0000

On Wed, 20 Sep 2006, Daniel Rudy wrote:

>> Number:         103432
>> Category:       kern
>> Synopsis:       panic: nfssvc_nfsd(): debug.mpsafenet=1 && Giant
>> Confidential:   no
>> Severity:       critical
>> Priority:       high
>> Responsible:    freebsd-bugs
>> State:          open
>> Quarter:
>> Keywords:
>> Date-Required:
>> Class:          sw-bug
>> Submitter-Id:   current-users
>> Arrival-Date:   Wed Sep 20 15:40:17 GMT 2006
>> Closed-Date:
>> Last-Modified:
>> Originator:     Daniel Rudy
>> Release:        6.1-RELEASE-p7
>> Organization:
>> Environment:
>> Description:
> This computer is configured as a NFS server and it also has IPSEC enabled.  When a NFS client accesses this server, the server imediately panics with the following error "panic: nfssvc_nfsd(): debug.mpsafenet=1 && Giant" and reboots hanging the client.  On a release 6.0 machine, debug.mpsafe is forced to 0 because IPSEC requires Giant.
>> How-To-Repeat:
> On a 6.1 system, enable IPSEC and NFS then try to access the server remotely.
>> Fix:
> Can't.  The OID for debug.mpsafenet is readonly.

It would be very helpful to have a stack trace on this one.

There's a reasonable chance that this bug is gone in 7.x as we now have an 
entirely MPSAFE IPSEC implementation, and the debug.mpssafenet compat code has 
been entirely removed.  However, it would be very helpful to know.  You should 
be able to compile and use a 7.x kernel with a 6.x userspace, which would give 
you a lower-risk way to determine this.  Make sure to do a 7.x buildworld 
before 7.x buildkernel, but only to a 7.x installkernel, not 7.x 
installworld/mergemaster.

Robert N M Watson
Computer Laboratory
University of Cambridge