NFS4.1 with KRB mount on ESXi 6.0 GA fails with "Sysinfo error on operation returned status : Timeout"
search cancel

NFS4.1 with KRB mount on ESXi 6.0 GA fails with "Sysinfo error on operation returned status : Timeout"

book

Article ID: 306351

calendar_today

Updated On:

Products

VMware vCenter Server VMware vSphere ESXi

Issue/Introduction

Symptoms:

  • This article only applies for ESXi 6.0 GA for NFS4.1 KRB mount.

  • On ESXi 6.0 GA, when you try to mount a NFS4.1 with KRB, mount fails with the below error :-
    Sysinfo error on operation returned status : Timeout. Please see the VMkernel log for detailed error information

  • In the vmkernel.log file, you see the output similar to:

YYYY-MM-DDTHH:MM:SS.Z cpu##:34710 opID=11cfd36e)StorageApdHandler: 982: APD Handle Created with lock[StorageApd-0x43075ceb7130]
YYYY-MM-DDTHH:MM:SS.Z cpu##:33477)SunRPC: 1026: Sending Import_data [IP_Address]
YYYY-MM-DDTHH:MM:SS.Z cpu##:33477)SunRPC: 916: ctx: 0x4302e78545c0, length: 37, msg: 0x4302e7855710
YYYY-MM-DDTHH:MM:SS.Z cpu##:33466)SunRPC: 797: Received message 14 id 100
YYYY-MM-DDTHH:MM:SS.Z cpu##:33477)SunRPC: 1041: Received Import_data response
YYYY-MM-DDTHH:MM:SS.Z cpu##:33477)SunRPC: 1079: Imported data with handle 0x100000022
YYYY-MM-DDTHH:MM:SS.Z cpu##:33477)SunRPC: 916: ctx: 0x4302e78545c0, length: 25, msg: 0x4302e7855710
YYYY-MM-DDTHH:MM:SS.Z cpu##:33466)SunRPC: 797: Received message 18 id 101
YYYY-MM-DDTHH:MM:SS.Z cpu##:33477)SunRPC: 916: ctx: 0x4302e78545c0, length: 25, msg: 0x4302e7855180
YYYY-MM-DDTHH:MM:SS.Z cpu##:33466)SunRPC: 797: Received message 16 id 102
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)SunRPC: 916: ctx: 0x4302e78545c0, length: 48, msg: 0x4302e7855b10
YYYY-MM-DDTHH:MM:SS.Z cpu##:33466)SunRPC: 797: Received message 10 id 103
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)SunRPC: 916: ctx: 0x4302e78545c0, length: 49, msg: 0x4302e7856030
YYYY-MM-DDTHH:MM:SS.Z cpu##:33466)SunRPC: 797: Received message 4 id 104
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)SunRPC: 729: KGSS_InitSecContext response 851968
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)WARNING: SunRPC: 684: KGSS init security context failed: maj 851968, min 195887105
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)SunRPC: 916: ctx: 0x4302e78545c0, length: 25, msg: 0x4302e7856030
YYYY-MM-DDTHH:MM:SS.Z cpu##:33466)SunRPC: 797: Received message 12 id 105
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)SunRPC: 916: ctx: 0x4302e78545c0, length: 48, msg: 0x4302e7855b10
YYYY-MM-DDTHH:MM:SS.Z cpu##:33466)SunRPC: 797: Received message 10 id 106
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)SunRPC: 916: ctx: 0x4302e78545c0, length: 49, msg: 0x4302e7856030
YYYY-MM-DDTHH:MM:SS.Z cpu##:33466)SunRPC: 797: Received message 4 id 107
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)SunRPC: 729: KGSS_InitSecContext response 851968
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)WARNING: SunRPC: 684: KGSS init security context failed: maj 851968, min 195887105
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)SunRPC: 916: ctx: 0x4302e78545c0, length: 25, msg: 0x4302e7856030
YYYY-MM-DDTHH:MM:SS.Z cpu##:33466)SunRPC: 797: Received message 12 id 108
YYYY-MM-DDTHH:MM:SS.Z cpu##:33419)SunRPC: 916: ctx: 0x4302e78545c0, length: 48, msg: 0x4302e7855b10

Notes:

  • When looking at the allowed encryption type on the AD for the nfs4.1 user, we see the allowed type is DES-CBC-MD5.
  • The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Purpose:

This article provides steps to troubleshoot the issue of mounting the NFS4.1 with KRB mount on ESXi 6.0 GA.

Environment

  • VMware vCenter Server 6.0.x
  • VMware Update Manager 6.0
  • VMware vSphere ESXi 6.0
  • VMware vCenter Converter Standalone 6.x

Cause

This issue occurs if the correct encryption mode is not allowed/enabled on the AD server.

Resolution

To resolve this issue, enable the RC4-HMAC, DES-CBC-MD5 encryption mode on AD Server. The NFS 4.1 client supports only this encryption mode.

Powered by Wolken Software