February 2008 - Darwin-kernel

Re: gssd-agent: Minor error <1> Unknown Error Code: 19777
by Terry Lambert 07 Feb '08

07 Feb '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Hi list, I'm running a cluster of Mac's with kerberized nfs, and I keep getting this rather cryptic error message in my log: We are running SGE (sun grid engine), and the above error prevents us from writing to nfs directories. So far, our solution is to reboot the machine. I'm wondering if anyone has had similar experiences, and if anyone knows what error code 19777 actually means? Here's an answer from the maintainer: You can read more about kerberized NFS in Leopard here: http://docs.info.apple.com/article.html?artnum=306694 -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On Feb 6, 2008, at 2:13 AM, Roger Herikstad wrote: Feb 6 17:31:52 work03 gssd-agent[227]: Error returned by svc_mach_gss_init_sec_context: Feb 6 17:31:52 work03 gssd-agent[227]: Major error <1> Unspecified GSS failure. Minor code may provide more information Feb 6 17:31:52 work03 gssd-agent[227]: Minor error <1> Unknown Error Code: 19777 Feb 6 17:31:52 work03 gssd-agent[227]: nfs client Kerberos: head.neuralc:/Volumes/Xraid/XUsers, uid=501 - Unknown Error Code: 19777 There's a known bug that prevents the message from being printed, but error code 19777 is a kerberos library error that actually corresponds to the text: "Can't display user interface from this environment". The message implies that the kerberos library attempted to pop up a window to obtain a kerberos login because you're lacking a ticket. You'll normally get a kerberos ticket when you log in through the loginwindow or the screen saver. You get the message if you try to access a kerberized NFS mount without a kerberos ticket - in this case it was user 501 - which looks like a local UID - not a network one. You can verify your kerberos creds with the klist command - or attempt to establish one with kinit. This email sent to site_archiver(a)lists.apple.com

1 0

Re: gssd-agent: Minor error <1> Unknown Error Code: 19777
by Quinn 06 Feb '08

06 Feb '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com I'm wondering if anyone has had similar experiences, and if anyone knows what error code 19777 actually means? <key>MachServices</key> <dict> <key>com.apple.gssd</key> <dict> <key>TaskSpecialPort</key> <integer>8</integer> </dict> </dict> Note that 8 == TASK_GSSD_PORT. <http://developer.apple.com/technotes/tn2005/tn2083.html#FIGLAUNCHTREE> <http://developer.apple.com/samplecode/BootstrapDump/index.html> S+E -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… At 18:13 +0800 6/2/08, Roger Herikstad wrote: I'm not entirely sure what's going on in your specific setup, but I can give you some background that might be helpful. I investigated this error when helping a developer with mounting SMB volumes from a pre-login context (for the Apple folks following along at home, that's <sonr://Request/37259404> leading to <rdar://problem/5642963>). There are at least three network file systems that support Kerberos: AFP, SMB, and NFS. For historical reasons AFP's implementation is somewhat wacky and is not relevant to this discussion. SMB and NFS, however, share the same architecture. Specifically, they both use GSS. There's no GSS library in the kernel. If SMB or NFS need to do Kerberos work, they pass the work off to a user space helper process, <x-man-page://8/gssd>. They talk to this agent via a task special port (TASK_GSSD_PORT). This port is connected to an instance of "gssd". This relationship is set up by launchd. Specifically, the "gssd" launchd property list file ("/System/Library/LaunchDaemons/com.apple.gssd.plist") contains some properties that tell launchd that "gssd" is responsible for this special port: By default, this port is inherited from parent to child. However, when you log in, launchd learns about a new job ("/System/Library/LaunchAgents/com.apple.gssd-agent.plist") and that overrides the TASK_GSSD_PORT. The end result is that, for each user, there is an instance of "gssd" running in that user's context (specifically, in the launchd background session) that is responsible for that user's GSS needs. Any process launched by that user should inherit a TASK_GSSD_PORT that references their "gssd", and thus kernel operation done by that process will end up talking to the correct per-user "gssd". To be clear, the per-user "gssd" runs in the same context as "CCacheServer", as shown in Figure 3 of Technote 2083. And the single global "gssd" runs in the same context as "configd" in that same figure. My experience is that you get this error when a process running kernel code (in your case nfs, in my case smbfs) does some Kerberos operation and ends up talking to the wrong "gssd". The most likely scenario is that its inherited a reference to the global "gssd". It could be that SGE is starting user code in the global bootstrap namespace. That's generally a bad idea. You can test this theory by using "BootstrapDump MAP" to see what bootstrap context your code is running in. This email sent to site_archiver(a)lists.apple.com

1 0

gssd-agent: Minor error <1> Unknown Error Code: 19777
by Roger Herikstad 06 Feb '08

06 Feb '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=olsV9Fdi+um0nbRUMUA8MBGX5Go9HzgRXa70yPdIoFw=; b=FaCz3e2Gi+fuHyJYNjPL3tFkjfpmSX9SZ9PHDgqVjOZ1jpek9xxq7+/JQrGnsC7hDfZmpl0vyWgplzrIySfxxlKCkd1No67xrCFv5/G7itgVf302mdGW9nCFDs90QjRjX2LpOWjkw7/85DaatNMoTdkcGURlEWCEK24SZhfjM/U= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=M+e8nGAOF4J4V5aRuWrlvnoc3fYOGzKUDBxZ3okA6Ozo3xhiINLM9aR912spUST2ID9gImz/Q0h50HDaWs+dfGPQB5ibd0k76phJRB/AVd2Ey3apWEsmJ9/hXkDyyPqvP5Fl7FYro3ONKclKhpYVEQ+Ylh2iNCGj5CD+X100Hy8= Hi list, I'm running a cluster of Mac's with kerberized nfs, and I keep getting this rather cryptic error message in my log: Feb 6 17:31:52 work03 gssd-agent[227]: Error returned by svc_mach_gss_init_sec_context: Feb 6 17:31:52 work03 gssd-agent[227]: Major error <1> Unspecified GSS failure. Minor code may provide more information Feb 6 17:31:52 work03 gssd-agent[227]: Minor error <1> Unknown Error Code: 19777 Feb 6 17:31:52 work03 gssd-agent[227]: nfs client Kerberos: head.neuralc:/Volumes/Xraid/XUsers, uid=501 - Unknown Error Code: 19777 We are running SGE (sun grid engine), and the above error prevents us from writing to nfs directories. So far, our solution is to reboot the machine. I'm wondering if anyone has had similar experiences, and if anyone knows what error code 19777 actually means? Thanks Sincerely, Roger Herikstad _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

16KB clusters mbuf clusters on ppc?
by Andrew Gallatin 05 Feb '08

05 Feb '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Hi, I'm failing to obtain the nifty, 16KB virtually contiguous mbuf clusters on ppc (10.5.x). According to sysctl kern.ipc.njcl, njcl is 0 on the ppc box (and large on the intel box). It seems like CONFIG_MBUF_JUMBO is not present in the ppc kernel config file, but is present for intel. According to grep on the 1228.0.2 source tree, the line is present in ./bsd/conf/MASTER, which I thought was shared by both, so I'm confused. Is there any way to get the system to allocate and use 16KB clusters on ppc? They really help 10GbE performance. Thanks, Drew _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Kernel building
by Brian Bechtel 03 Feb '08

03 Feb '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=HKbmP0iv15G+/EvYQCQ7pqbmN6MdhDX8QMcBH3CHUes=; b=TJQLfNTCWX22VbZ8AuN2N5E5hv/k9k0IdIoEF/yLgWII8hkSiHyaUmFWjlj3kdnoyb9v81Yu886gbH1hTT6SzPC+zKrGXWC0TUy+fpQsHDTZ+AMbH6hOCiN1lLLhFn5/UCY+QK6foUvZwyKBldg+N2vdL3XGZSNJWAGndMxIxnU= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=bND7pf/mzN0JfJjJrLT9k7d66u3Y8elXhRdZ8imwFpHf9zWZncCgUSerKnskYya28AktAFpf7CsjkSr9ONxcqkIUjnum8M5CQDpDE17kUvBR3ytUX5m1/x+SQnzoTyXZKf2kBGe8JNU67wYFPX9GxtOfukWRXUc2putQh61BRos= On Feb 3, 2008 6:03 AM, cristian pancià <hazzino(a)gmail.com> wrote: > How is it possible to build the kernel xnu under Leopard? The DarwinBuild project assists with building Darwin projects. It can be used to compile xnu for Leopard. <http://trac.macosforge.org/projects/darwinbuild> <http://svn.macosforge.org/repository/darwinbuild/trunk/README> follow the instructions to create a disk image $ darwinbuild -init 9B18 $ darwinbuild xnu _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Kernel building
by cristian pancià 03 Feb '08

03 Feb '08

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; bh=QBvctgjvcR3rRMZkANBsRRDNU/32zjorTi0objabUiE=; b=I6e3U0nrZVGfSgnBXLNKDO9N/TrLN/JncfX3oMlIdPwLq4fa8ZOI5bojWEOKFSJ8Ck/kQ1PYFbetoS/kxhiiwEdH3yoGL+zW32fEh23GUz99E5KgZ0LGVvtCeVRrXKjkPb8y7eZw7bGuPdz3KRtWrBA157NIMYi5sjZh7eC6iwI= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type; b=Fr1o9uWTOR44Q46mSH4uTyRTTUrYuT+vwEcOCq1aGoCUklwc0sFJKPMAdEoUjidtFB2/KZVfoF/5++E8iDd+oRWeWkJpJ66MWN8Ld1QINDFhX84ZsHGmA1hykTYwT59zyLEt4G/BfGvWYg2matUo2QEE0bH6jmyQcEIdDMyrmXc= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0