From: Neil Brown <neilb@suse.de>
To: Steve Dickson <steved@redhat.com>
Cc: linux-nfs@vger.kernel.org
Subject: [PATCH 0/6] fix some problems with v4root handling in mountd
Date: Tue, 24 Apr 2012 15:46:38 +1000 [thread overview]
Message-ID: <20120424054003.20130.16209.stgit@notabene.brown> (raw)
First I'd like to say that I love seeing comments that explain the
code.. What way when the code does something different to the
comment, I can be sure I'm on to something :-)
If I have exports:
/ *(rw,no_root_squash)
/home 192.168.1.2(rw,no_root_squash)
Then I want to export 'root' to everything (on my side of a firewall)
but '/home' only to one machine.
However this doesn't work for host 192.168.1.2.
If I try to mount '/' with NFSv3, it fails.
If I try to mount '/' with NFSv4, then it works but we only see
"home" in the mounted "/".
The problem is that the export of "/home" causes a V4ROOT export
of "/" to be created for 192.168.1.2 and as MCL_SUBNETWORK comes
before MCL_WILDCARD, the V4ROOT export wins and the other wildcard
export isn't even tried.
So the following patches:
1/ fix the NFSv4 mount case so that we really see '/' and not a pseudo
'/'. This is the case where the comment says the right thing
but the code doesn't.
2/ fix 'mountd' lookup for NFSv2/v3 so they successfully mount
the real export, and don't fail because only the V4ROOT export
was found,
3/ Fix a similar ordering problem in nfsd_fh. Without this an
NFSv4 client might see the V4ROOT export for '/' rather than
the explicitly exported export.
4/ Set a useful ttl on V4ROOT exports so they don't need to
constantly be refreshed, an
5/ fix a buglet which didn't cause any of these problems but
certainly looks wrong.
Enjoy :-)
NeilBrown
---
Neil Brown (6):
v4_root_add_parents: remove a possible buffer overflow.
v4root: set the time-to-live for V4ROOT exports to the DEFAULT.
v4set_root: force "fsid=0" for all exports of '/'
nfsd_fh: if two exports are possible, choose the one without V4ROOT
auth_authenticate_newcache: prefer non-V4ROOT export over V4ROOT exports.
lookup_export: really prefer nonV4ROOT exports.
utils/mountd/auth.c | 7 +++----
utils/mountd/cache.c | 21 +++++++++++++++++----
utils/mountd/v4root.c | 12 ++++++++++--
3 files changed, 30 insertions(+), 10 deletions(-)
--
Signature
next reply other threads:[~2012-04-24 5:47 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-04-24 5:46 Neil Brown [this message]
2012-04-24 5:46 ` [PATCH 2/6] auth_authenticate_newcache: prefer non-V4ROOT export over V4ROOT exports Neil Brown
2012-04-24 5:46 ` [PATCH 5/6] v4root: set the time-to-live for V4ROOT exports to the DEFAULT Neil Brown
2012-04-24 5:46 ` [PATCH 4/6] v4set_root: force "fsid=0" for all exports of '/' Neil Brown
2012-04-24 22:03 ` J. Bruce Fields
2012-04-24 5:46 ` [PATCH 3/6] nfsd_fh: if two exports are possible, choose the one without V4ROOT Neil Brown
2012-04-24 5:46 ` [PATCH 1/6] lookup_export: really prefer nonV4ROOT exports Neil Brown
2012-04-24 5:46 ` [PATCH 6/6] v4_root_add_parents: remove a possible buffer overflow Neil Brown
2012-04-24 22:05 ` [PATCH 0/6] fix some problems with v4root handling in mountd J. Bruce Fields
2012-05-01 19:33 ` Steve Dickson
2012-05-02 1:23 ` NeilBrown
2012-05-02 10:32 ` Steve Dickson
2012-05-02 23:08 ` NeilBrown
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20120424054003.20130.16209.stgit@notabene.brown \
--to=neilb@suse.de \
--cc=linux-nfs@vger.kernel.org \
--cc=steved@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).