Bug #14498
closedcephx error: NSS AES final round failed: -8190 while bootstrapping containerised mon on RHEL 7.2
0%
Description
I have been running ceph-docker project with ceph/daemon:centos-latest image based on 'hammer' release on RHEL 7.1 and Centos 7.1 hosts for some time now and it runs just fine.
Command line used: docker run -d --net=host -v /etc/ceph:/etc/ceph -v /var/lib/ceph:/var/lib/ceph -e MON_IP=10.10.191.104 -e CEPH_PUBLIC_NETWORK=10.10.191.0/24 ceph/daemon:centos-laters mon
When I upgraded by host OS [yes right, host OS] to RHEL 7.2, I am hitting numerous cephx issues while running same image and command line.
2016-01-25 10:08:59.697400 7fef43afb700 0 cephx: verify_authorizer could not decrypt ticket info: error: NSS AES final round failed: 8190 10.10.191.104:6789/0 >> 10.10.191.100:6789/0 pipe(0x3697000 sd=19 :6789 s=0 pgs=0 cs=0 l=0 c=0x34bf340).accept we reset (peer sent cseq 2), sending RESETSESSION
2016-01-25 10:08:59.697406 7fef43afb700 0 -
2016-01-25 10:09:01.697086 7fef43afb700 0 cephx: verify_authorizer could not decrypt ticket info: error: NSS AES final round failed: 8190 10.10.191.104:6789/0 >> 10.10.191.100:6789/0 pipe(0x3697000 sd=19 :6789 s=0 pgs=0 cs=0 l=0 c=0x34bf340).accept we reset (peer sent cseq 2), sending RESETSESSION
2016-01-25 10:09:01.697110 7fef43afb700 0 -
2016-01-25 10:09:02.058557 7fef3c54f700 0 cephx server osd.25: couldn't find entity name: osd.25
2016-01-25 10:09:03.697015 7fef3a44a700 0 cephx: verify_authorizer could not decrypt ticket info: error: NSS AES final round failed: 8190 10.10.191.104:6789/0 >> 10.10.191.100:6789/0 pipe(0x3708000 sd=20 :6789 s=0 pgs=0 cs=0 l=0 c=0x34bf340).accept we reset (peer sent cseq 2), sending RESETSESSION
2016-01-25 10:09:03.697030 7fef3a44a700 0 -
As I can infer from logs, mon has done the requisite setup and started to run. I have attached the complete log for debug.
Can someone please let us know as to why cephx errors are reported. Unfortunately the same runs fine on RHEL 7.1, Fedora Atomic hosts and not with RHEL 7.2 kernel.
Files