All of lore.kernel.org
 help / color / mirror / Atom feed
From: "François Valenduc" <francois.valenduc@skynet.be>
To: unlisted-recipients:; (no To-header on input)
Cc: "J. Bruce Fields" <bfields@fieldses.org>,
	Kevin Coffman <kwc@umich.edu>,
	linux-nfs@vger.kernel.org
Subject: Re: nfs and kerberos authentification problem.
Date: Fri, 05 Sep 2008 20:57:16 +0200	[thread overview]
Message-ID: <48C1810C.5090703@skynet.be> (raw)
In-Reply-To: <48C17C20.6010707@skynet.be>

=46ran=C3=A7ois Valenduc a =C3=A9crit :
> J. Bruce Fields a =C3=A9crit :
>> On Thu, Sep 04, 2008 at 09:38:34PM +0200, Fran=C3=A7ois Valenduc wro=
te:
>> =20
>>> Kevin Coffman a =C3=A9crit :
>>>   =20
>>>> This may be a stupid question, but can you access the mount using
>>>> auth_sys?  As I think I said before, it looks like the Kerberos pa=
rt
>>>> is working.  (Unless there are errors on the client side from
>>>> rpc.gssd.)
>>>>
>>>>        =20
>>> I finally found a solution to the problem.
>>>    =20
>>
>> Great!
>>
>> =20
>>> It seems that it's needed to  compile both NFS v3 and v4 server=20
>>> support to make kerberos support  working. I find that a bit strang=
e,=20
>>> but with this kernel configuration,  it is working fine. I find tha=
t=20
>>> a bit strange since I export the  filesystem as NFS3.
>>> Should we consider this as a bug ? I am running kernel 2.6.26.3.
>>>    =20
>>
>> Yes, that would be a bug!  But: are you sure gss support was built i=
n on
>> the server?
>>
>> --b.
>>
>> =20
>>> Thanks a lot for your patience,
>>> Fran=C3=A7ois
>>>    =20
>>
>>  =20
> There is still a major problem. Even if I can now mount the filesyste=
m=20
> with kerberos authentification, I can't write any file. Furthermore, =
I=20
> can even not see the content of the exported directory without being=20
> root. Is it due to the problem of uid/gid mapping ?
>=20
> Fran=C3=A7ois

What I don' understand is that the file system is well mounted read-wri=
te:
pc-francois:/home/francois on /mnt/pc-francois type nfs=20
(rw,users,noatime,sec=3Dkrb5,rsize=3D1024,wsize=3D1024,soft,addr=3D192.=
168.1.2)

The mounted directory has the following permissions:

drwxrwsr-x 77 francois francois 4,0K sep  5 20:35 pc-francois/

So, I don't understand why I can't write any file on it.

Thanks for your help;

=46ran=C3=A7ois

  reply	other threads:[~2008-09-05 18:57 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-09-03 18:19 nfs and kerberos authentification problem François Valenduc
2008-09-03 20:12 ` Kevin Coffman
     [not found]   ` <4d569c330809031312p3515f4d8id9cbec94d871e058-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2008-09-04 16:45     ` François Valenduc
2008-09-04 16:56       ` J. Bruce Fields
2008-09-04 17:31         ` François Valenduc
2008-09-04 17:33           ` J. Bruce Fields
2008-09-04 17:41             ` François Valenduc
2008-09-04 17:49               ` J. Bruce Fields
2008-09-04 17:58                 ` François Valenduc
2008-09-04 18:39                   ` J. Bruce Fields
2008-09-04 18:53                     ` François Valenduc
2008-09-04 18:59                       ` J. Bruce Fields
2008-09-04 19:31                         ` Kevin Coffman
     [not found]                           ` <4d569c330809041231wcbddde8w419968280de9e39a-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2008-09-04 19:38                             ` François Valenduc
2008-09-04 19:40                               ` J. Bruce Fields
2008-09-04 19:41                                 ` J. Bruce Fields
2008-09-04 19:56                                   ` François Valenduc
2008-09-05 18:36                                 ` François Valenduc
2008-09-05 18:57                                   ` François Valenduc [this message]
2008-09-05 21:26                                     ` J. Bruce Fields
2008-09-05 21:23                                   ` J. Bruce Fields

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=48C1810C.5090703@skynet.be \
    --to=francois.valenduc@skynet.be \
    --cc=bfields@fieldses.org \
    --cc=kwc@umich.edu \
    --cc=linux-nfs@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.