rpc.svcgssd dies when Network Manager created localhost6 entry is in hosts file

[Matt Mossholder]

Description: Ubuntu 10.10
Release: 10.10
nfs-kernel-server: Installed: 1:1.2.2-1ubuntu1

Network Manager creates an entry for localhost6.localdomain6 in /etc/hosts like the following:

::1 mourneblade.mossholder.com mourneblade localhost6.localdomain6 localhost6

When utilizing the system as a kerberized NFS server (in my case, workstations with some local user directories, and some remotely mounted), this causes rpc.svcgssd to exit with the following error:

Nov 13 13:27:19 mourneblade rpc.svcgssd[6421]: ERROR: GSS-API: error in gss_acquire_cred(): Unspecified GSS failure. Minor code may provide more information - Key table entry not found
Nov 13 13:27:19 mourneblade rpc.svcgssd[6421]: unable to obtain root (machine) credentials
Nov 13 13:27:19 mourneblade rpc.svcgssd[6421]: do you have a keytab entry for nfs/<your.host>@<YOUR.REALM> in /etc/krb5.keytab?

Commenting out the entry from /etc/hosts resolves the issue.

Note: IPv6 is set to "ignore" in Network Manager, which I believe is the default.

[Steve Langasek (vorlon)]

What does the complete /etc/hosts look like in this case?

[Matt Mossholder (matt-mossholder)]

Another item of note... it doesn't appear to be Network Manager putting the hostname on the ::1 line. It must be being done by something else... the installer?

## This is /etc/hosts is the case that causes rpc.svcgssd to fail.
192.168.0.1 mourneblade.mossholder.com mourneblade # Added by NetworkManager
127.0.0.1 localhost.localdomain localhost
::1 mourneblade.mossholder.com mourneblade localhost6.localdomain6 localhost6
127.0.1.1 mourneblade

# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts

## This is /etc/hosts is the case that works as expected.
192.168.0.1 mourneblade.mossholder.com mourneblade # Added by NetworkManager
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
127.0.1.1 mourneblade

# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts

[Steve Langasek (vorlon)]

Thanks. And what is the principal name that you have in /etc/krb5.keytab?

[Steve Langasek (vorlon)]

nevermind - I'm able to reproduce this problem locally now after rigging my /etc/hosts accordingly. Marking this as confirmed - I don't think it's right for the hostname to be listed as the canonical name of ::1, but that shouldn't break rpc.svcgssd.