Project

General

Profile

Actions

Bug #14498

closed

cephx error: NSS AES final round failed: -8190 while bootstrapping containerised mon on RHEL 7.2

Added by Deepthi Dharwar over 8 years ago. Updated about 8 years ago.

Status:
Can't reproduce
Priority:
Urgent
Assignee:
-
Category:
cephx
Target version:
-
% Done:

0%

Source:
other
Tags:
rhel 7.2, cephx
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

I have been running ceph-docker project with ceph/daemon:centos-latest image based on 'hammer' release on RHEL 7.1 and Centos 7.1 hosts for some time now and it runs just fine.

Command line used: docker run -d --net=host -v /etc/ceph:/etc/ceph -v /var/lib/ceph:/var/lib/ceph -e MON_IP=10.10.191.104 -e CEPH_PUBLIC_NETWORK=10.10.191.0/24 ceph/daemon:centos-laters mon

When I upgraded by host OS [yes right, host OS] to RHEL 7.2, I am hitting numerous cephx issues while running same image and command line.

2016-01-25 10:08:59.697400 7fef43afb700 0 cephx: verify_authorizer could not decrypt ticket info: error: NSS AES final round failed: 8190
2016-01-25 10:08:59.697406 7fef43afb700 0 -
10.10.191.104:6789/0 >> 10.10.191.100:6789/0 pipe(0x3697000 sd=19 :6789 s=0 pgs=0 cs=0 l=0 c=0x34bf340).accept we reset (peer sent cseq 2), sending RESETSESSION
2016-01-25 10:09:01.697086 7fef43afb700 0 cephx: verify_authorizer could not decrypt ticket info: error: NSS AES final round failed: 8190
2016-01-25 10:09:01.697110 7fef43afb700 0 -
10.10.191.104:6789/0 >> 10.10.191.100:6789/0 pipe(0x3697000 sd=19 :6789 s=0 pgs=0 cs=0 l=0 c=0x34bf340).accept we reset (peer sent cseq 2), sending RESETSESSION
2016-01-25 10:09:02.058557 7fef3c54f700 0 cephx server osd.25: couldn't find entity name: osd.25
2016-01-25 10:09:03.697015 7fef3a44a700 0 cephx: verify_authorizer could not decrypt ticket info: error: NSS AES final round failed: 8190
2016-01-25 10:09:03.697030 7fef3a44a700 0 -
10.10.191.104:6789/0 >> 10.10.191.100:6789/0 pipe(0x3708000 sd=20 :6789 s=0 pgs=0 cs=0 l=0 c=0x34bf340).accept we reset (peer sent cseq 2), sending RESETSESSION

As I can infer from logs, mon has done the requisite setup and started to run. I have attached the complete log for debug.
Can someone please let us know as to why cephx errors are reported. Unfortunately the same runs fine on RHEL 7.1, Fedora Atomic hosts and not with RHEL 7.2 kernel.


Files

debug-log (8.15 KB) debug-log Deepthi Dharwar, 01/25/2016 10:38 AM
Actions

Also available in: Atom PDF