Re: NFSv4, SSH etc.

[Chuck Lever <chuck.lever@oracle.com>]

[-- Attachment #1: Type: text/plain, Size: 949 bytes --]

Chris Hall wrote:
> Help !  I am failing to set up a secure NFS server.  (Generally thought
> to be impossible by most sources !)
> 
> I am running a fully up to date Fedora 7.
> 
>   kernel-2.6.22.9-91.fc7
>   nfs-utils-lib-1.0.8-10.fc7
>   nfs-utils-1.1.0-3.fc7
>   libtirpc-0.1.7-9.fc7
>   rpcbind-0.1.4-6.fc7
> 
> I have been trying to get NFSv4 working between a client on the inside
> of my firewall and a server on the outside (DMZ).
> 
>  a. I thought NFSv4 would be better because it apparently only requires
>     the one TCP port, which is easier to manage.  This turns out not to
>     be entirely the case -- umount appears to still want to talk to port
>     111 to find mountd.

This is a known bug in nfs-utils-1.1.0, and was addressed in 
nfs-utils-1.1.1, just released last week.  NFSv4 certainly doesn't need 
to talk to mountd.  The umount.nfs[4] command was changed to skip the 
mountd step when unmounting "nfs4" file systems.

[-- Attachment #2: chuck.lever.vcf --]
[-- Type: text/x-vcard, Size: 315 bytes --]

begin:vcard
fn:Chuck Lever
n:Lever;Chuck
org:Oracle Corporation;Corporate Architecture: Linux Projects Group
adr:;;1015 Granger Avenue;Ann Arbor;MI;48104;USA
email;internet:chuck dot lever at nospam oracle dot com
title:Principal Member of Staff
tel;work:+1 248 614 5091
x-mozilla-html:FALSE
version:2.1
end:vcard


[-- Attachment #3: Type: text/plain, Size: 314 bytes --]

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/

[-- Attachment #4: Type: text/plain, Size: 140 bytes --]

_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs