Linux NFS development
 help / color / mirror / Atom feed
From: "François Valenduc" <francois.valenduc@skynet.be>
To: unlisted-recipients:; (no To-header on input)
Cc: "J. Bruce Fields" <bfields@fieldses.org>,
	Kevin Coffman <kwc@umich.edu>,
	linux-nfs@vger.kernel.org
Subject: Re: nfs and kerberos authentification problem.
Date: Fri, 05 Sep 2008 20:57:16 +0200	[thread overview]
Message-ID: <48C1810C.5090703@skynet.be> (raw)
In-Reply-To: <48C17C20.6010707@skynet.be>

=46ran=C3=A7ois Valenduc a =C3=A9crit :
> J. Bruce Fields a =C3=A9crit :
>> On Thu, Sep 04, 2008 at 09:38:34PM +0200, Fran=C3=A7ois Valenduc wro=
te:
>> =20
>>> Kevin Coffman a =C3=A9crit :
>>>   =20
>>>> This may be a stupid question, but can you access the mount using
>>>> auth_sys?  As I think I said before, it looks like the Kerberos pa=
rt
>>>> is working.  (Unless there are errors on the client side from
>>>> rpc.gssd.)
>>>>
>>>>        =20
>>> I finally found a solution to the problem.
>>>    =20
>>
>> Great!
>>
>> =20
>>> It seems that it's needed to  compile both NFS v3 and v4 server=20
>>> support to make kerberos support  working. I find that a bit strang=
e,=20
>>> but with this kernel configuration,  it is working fine. I find tha=
t=20
>>> a bit strange since I export the  filesystem as NFS3.
>>> Should we consider this as a bug ? I am running kernel 2.6.26.3.
>>>    =20
>>
>> Yes, that would be a bug!  But: are you sure gss support was built i=
n on
>> the server?
>>
>> --b.
>>
>> =20
>>> Thanks a lot for your patience,
>>> Fran=C3=A7ois
>>>    =20
>>
>>  =20
> There is still a major problem. Even if I can now mount the filesyste=
m=20
> with kerberos authentification, I can't write any file. Furthermore, =
I=20
> can even not see the content of the exported directory without being=20
> root. Is it due to the problem of uid/gid mapping ?
>=20
> Fran=C3=A7ois

What I don' understand is that the file system is well mounted read-wri=
te:
pc-francois:/home/francois on /mnt/pc-francois type nfs=20
(rw,users,noatime,sec=3Dkrb5,rsize=3D1024,wsize=3D1024,soft,addr=3D192.=
168.1.2)

The mounted directory has the following permissions:

drwxrwsr-x 77 francois francois 4,0K sep  5 20:35 pc-francois/

So, I don't understand why I can't write any file on it.

Thanks for your help;

=46ran=C3=A7ois

  reply	other threads:[~2008-09-05 18:57 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-09-03 18:19 nfs and kerberos authentification problem François Valenduc
2008-09-03 20:12 ` Kevin Coffman
     [not found]   ` <4d569c330809031312p3515f4d8id9cbec94d871e058-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2008-09-04 16:45     ` François Valenduc
2008-09-04 16:56       ` J. Bruce Fields
2008-09-04 17:31         ` François Valenduc
2008-09-04 17:33           ` J. Bruce Fields
2008-09-04 17:41             ` François Valenduc
2008-09-04 17:49               ` J. Bruce Fields
2008-09-04 17:58                 ` François Valenduc
2008-09-04 18:39                   ` J. Bruce Fields
2008-09-04 18:53                     ` François Valenduc
2008-09-04 18:59                       ` J. Bruce Fields
2008-09-04 19:31                         ` Kevin Coffman
     [not found]                           ` <4d569c330809041231wcbddde8w419968280de9e39a-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2008-09-04 19:38                             ` François Valenduc
2008-09-04 19:40                               ` J. Bruce Fields
2008-09-04 19:41                                 ` J. Bruce Fields
2008-09-04 19:56                                   ` François Valenduc
2008-09-05 18:36                                 ` François Valenduc
2008-09-05 18:57                                   ` François Valenduc [this message]
2008-09-05 21:26                                     ` J. Bruce Fields
2008-09-05 21:23                                   ` J. Bruce Fields

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=48C1810C.5090703@skynet.be \
    --to=francois.valenduc@skynet.be \
    --cc=bfields@fieldses.org \
    --cc=kwc@umich.edu \
    --cc=linux-nfs@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox