Frank, Thanks for the response, tried your patch disabling usage of gss_iov for krb5p but no luck - iozone tool stuck at 4k block size iops...i could see the following messages in ganesha logs. Is there any other place that needs to be changed to disable gss_iov ? ********* 14/10/2020 T02:05:43.505432-0700 6554[::ffff:10.10.108.68] [svc_35] 0 :rpc :svc_vc_reply: 0x7f960c101510 fd 13 SVCAUTH_WRAP failed (will set dead) 14/10/2020 T02:05:43.505508-0700 6554[::ffff:10.10.108.68] [svc_100] 0 :rpc :svc_vc_reply: 0x7f960c101510 fd 13 SVCAUTH_WRAP failed (will set dead) 14/10/2020 T02:05:43.505577-0700 6554[::ffff:10.10.108.68] [svc_87] 0 :rpc :svc_vc_reply: 0x7f960c101510 fd 13 SVCAUTH_WRAP failed (will set dead) 14/10/2020 T02:05:43.505602-0700 6554[::ffff:10.10.108.68] [svc_64] 0 :rpc :svc_vc_reply: 0x7f960c101510 fd 13 SVCAUTH_WRAP failed (will set dead) ********* Regards, Chakra On Tue, Oct 13, 2020 at 10:15 PM Frank Filz <ffilzlnx@mindspring.com> wrote:
Ok, I'm beginning to fear that using gss_iov for krb5p is causing problems, try this quick ntirpc patch and see if it makes a difference:
diff --git a/src/authgss_prot.c b/src/authgss_prot.c index b01578f..409da6e 100644 --- a/src/authgss_prot.c +++ b/src/authgss_prot.c @@ -267,7 +267,7 @@ xdr_rpc_gss_wrap(XDR *xdrs, xdrproc_t xdr_func, void *xdr_ptr, * If it's privacy, and NEWBUF is supported (because xdrs is a vector) * then NEWBUF will have allocated the new buffer. */ - vector = (svc == RPCSEC_GSS_SVC_INTEGRITY) || XDR_NEWBUF(xdrs); + vector = (svc == RPCSEC_GSS_SVC_INTEGRITY);
/* Marshal rpc_gss_data_t (sequence number + arguments). * If it's a vector, the response has been marshalled into a new
-----Original Message----- From: Chakra Divi [mailto:chakragithub@gmail.com] Sent: Tuesday, October 13, 2020 9:26 AM To: devel@lists.nfs-ganesha.org Subject: [NFS-Ganesha-Devel] Re: Issues seen with krb5i and krb5p mounts
with krb5i - i'm not seeing not much degradation - when compared with v2.5.
v2.5 - krb5i - 14m6.888s v3 - krb5i - 18m55.072s
with krb5p - v3 took more than 50% time than v2.5 _______________________________________________ Devel mailing list -- devel@lists.nfs-ganesha.org To unsubscribe send an email to devel-leave@lists.nfs-ganesha.org