Linux & RPC_GSS with NFS version 3

Linux & RPC_GSS with NFS version 3

[Omri Schwarz]

Hi, all. I am trying to get Fedora Coure 6 machines to talk
NFS 3 to each other with sec=krb5, and for the moment,
though I have gotten them to talk over other GSSAPI-enabled
services (ssh, imap, ftp, smtp and NFS 4), NFS 3 fails.
The server says
"""
mountd: MNT3(/export) called
mountd: mount request from unknown host 18.75.0.50 for /export (/export) 
""".

Going deeply enough I can see that mountd (1.0.10-7.fc6)
continues to check IP addresses against the string "gss/krb5" instead of
doing the right thing and having a chat with svcgssd.
I'll be gratefull for any help in getting mountd to DTRT here.

Regards,


Omri Schwarz --- ocschwar@mit.edu
Timeless wisdom of biomedical engineering: "Noise is principally
due to the presence of the patient." -- R.F. Farr


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

Re: Linux & RPC_GSS with NFS version 3

[J. Bruce Fields]

On Wed, May 02, 2007 at 03:40:16PM -0400, Omri Schwarz wrote:
> Hi, all. I am trying to get Fedora Coure 6 machines to talk
> NFS 3 to each other with sec=krb5, and for the moment,
> though I have gotten them to talk over other GSSAPI-enabled
> services (ssh, imap, ftp, smtp and NFS 4), NFS 3 fails.
> The server says
> """
> mountd: MNT3(/export) called
> mountd: mount request from unknown host 18.75.0.50 for /export (/export) 
> """.
> 
> Going deeply enough I can see that mountd (1.0.10-7.fc6)
> continues to check IP addresses against the string "gss/krb5" instead of
> doing the right thing and having a chat with svcgssd.
> I'll be gratefull for any help in getting mountd to DTRT here.

It's a known problem; it'll only work if you also export to the ip
address (read-only if you want, though note that may cause problems with
locking, since nlm also uses auth_unix).

--b.

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

Re: Linux & RPC_GSS with NFS version 3

[Omri Schwarz]

On Wed, 2 May 2007, J. Bruce Fields wrote:

> On Wed, May 02, 2007 at 03:40:16PM -0400, Omri Schwarz wrote:
>> Hi, all. I am trying to get Fedora Coure 6 machines to talk
>> NFS 3 to each other with sec=krb5, and for the moment,
>> though I have gotten them to talk over other GSSAPI-enabled
>> services (ssh, imap, ftp, smtp and NFS 4), NFS 3 fails.
>> The server says
>> """
>> mountd: MNT3(/export) called
>> mountd: mount request from unknown host 18.75.0.50 for /export (/export)
>> """.
>>
>> Going deeply enough I can see that mountd (1.0.10-7.fc6)
>> continues to check IP addresses against the string "gss/krb5" instead of
>> doing the right thing and having a chat with svcgssd.
>> I'll be gratefull for any help in getting mountd to DTRT here.
>
> It's a known problem; it'll only work if you also export to the ip
> address (read-only if you want, though note that may cause problems with
> locking, since nlm also uses auth_unix).

Yup, that fixed the problem. Thanks!

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs