bugTransport Sample Protocol - Bugs: bug #20936, RPC: Authentication error; why =...

 
 

bug #20936: RPC: Authentication error; why = Client credential too weak

Submitter:  Eric NOULARD <erk>
Submitted:  Thu 30 Aug 2007 11:56:36 AM UTC
   
 
Category:  Core Severity:  3 - Normal
Status:  Confirmed Privacy:  Public
Assigned to:  None Open/Closed:  Open
Release:  * 0.8.3 Fixed Release:  * Unknown
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 24 Jun 2008 08:08:09 PM UTC, comment #4: 

The problem is no longer there on Fedora 9.
It still uses the TI-RPC libs.
I guess there was a bug in the rpcbind that did not allow requests to be made through the loopback interface.

See also RedHat bug 358621
https://bugzilla.redhat.com/show_bug.cgi?id=358621

Robert de Vries <rhdv>
Group Member
Tue 25 Mar 2008 03:56:41 PM UTC, comment #3: 

I do add a temporary fix
which is to start rpcbind service in "insecure mode"
if you want to do that you may cp
the attached rpcbind file to

/etc/sysconfig/rpcbind

this works on Fedora 7

(file #15332)

Eric NOULARD <erk>
Group administrator
Thu 30 Aug 2007 01:39:34 PM UTC, comment #2: 
Eric NOULARD <erk>
Group administrator
Thu 30 Aug 2007 01:34:03 PM UTC, comment #1: 

Ok I think I will understand to myself.
The fact is Fedora 7 in the first linux distro
I've crossed which use
TI-RPC + RPCBind:
http://nfsv4.bullopensource.org/doc/tirpc_rpcbind.php

rpcbind is a drop-in replacement for
"classical" rpc portmapper.

It may be worth detecting if we are on a system
which use TI-RPC or "classical ONC-RPC"
and effectively use TI-RPC API instead of older SunRPC/ONCRPC.

but in the meantime the only acceptable solution
is to start rpcbind with the "-i" insecure option.

I "unassign" the bug since I'm not sure to have time to handle it.


Eric NOULARD <erk>
Group administrator
Thu 30 Aug 2007 11:56:36 AM UTC, original submission:  

On a Fedora 7 box
I am unable to start the properly compiled stub server
and I get the following error:


$ tsp_stub_server
#=====================================================================#
# Launching <StubbedServer> for generation of 1000 Symbols at 100.000000 Hz
#=====================================================================#
Cannot register service: RPC: Authentication error; why = Client credential too weak
  ERROR||/udd/deri/enoulard/workspace/tsp/src/core/rpc/tsp_server.c##TSP_rpc_run##277: RPC server unable to register ProgId=31230010
  ERROR||/udd/deri/enoulard/workspace/tsp/src/core/ctrl/tsp_request_handler.c##TSP_provider_rqh_manager_refresh##218: Request handler # 0 could not start properly
#=== End ===#


I am able to start stub server when logged as root.
And I am able to start it if the rpcbind daemon/service
is started using the "Insecure" mode.

As far as I understand, this would mean that we try
to use the rpc portmapper service through an @IP which
is not 127.0.0.1.




Eric NOULARD <erk>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #15332:  rpcbind added by erk (16B - application/octet-stream - rpcbind sysconfig options file)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rhdv (Posted a comment)
  • -email is unavailable- added by erk (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2008-03-25 erk Attached File- Added rpcbind, #15332
    2007-08-30 erk StatusNone Confirmed
        Assigned toerk None

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code