* gssd mounts not working
@ 2011-04-21 6:58 Richard Smits
2011-04-23 12:16 ` Steve Dickson
0 siblings, 1 reply; 4+ messages in thread
From: Richard Smits @ 2011-04-21 6:58 UTC (permalink / raw)
To: linux-nfs@vger.kernel.org
Hello,
We are having problems with our gssd nfs mounts. I will explain our
situation.
Our clients are running SLED 11 SP1.
Our server is a Netapp filer with Ontap 7.3.3P4.
We provide NFS exported directory's with krb5 security.
Our KDC is a Windows 2003 and 2008 Active Directory.
If we use nfs-client-1.2.1-8.1 everything works as expected.
But if we upgrade to (any) newer client, all gssd mounts fail. Now there
is a bugreport on Novell Bugzilla about this :
https://bugzilla.novell.com/show_bug.cgi?id=614293#c7
Apperantly if the nfs client is compiled with --disable-tirpc , the
ticket size from the AD is to big ?
On our Redhat server we do not have these problems. There we are running
: nfs-utils-1.2.2-7
Is there an explanation for these problems ? How can i find out if a
client has been compiled with specific options. There is no nfs devel
package for suse.
Greetings .. Richard Smits
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: gssd mounts not working
2011-04-21 6:58 gssd mounts not working Richard Smits
@ 2011-04-23 12:16 ` Steve Dickson
2011-04-23 17:00 ` Luk Claes
0 siblings, 1 reply; 4+ messages in thread
From: Steve Dickson @ 2011-04-23 12:16 UTC (permalink / raw)
To: Richard Smits; +Cc: linux-nfs@vger.kernel.org
On 04/21/2011 02:58 AM, Richard Smits wrote:
> Hello,
> We are having problems with our gssd nfs mounts. I will explain our situation.
>
> Our clients are running SLED 11 SP1.
> Our server is a Netapp filer with Ontap 7.3.3P4.
>
> We provide NFS exported directory's with krb5 security.
>
> Our KDC is a Windows 2003 and 2008 Active Directory.
>
> If we use nfs-client-1.2.1-8.1 everything works as expected.
>
> But if we upgrade to (any) newer client, all gssd mounts fail. Now there is a bugreport on Novell Bugzilla about this : https://bugzilla.novell.com/show_bug.cgi?id=614293#c7
>
> Apperantly if the nfs client is compiled with --disable-tirpc , the ticket size from the AD is to big ?
Yes this problem was fixed in libitrpc with:
commit 599511589ca7ddb3b2eac8d3aa5b0b38be7a7691
Author: Jeff Layton <jlayton@redhat.com>
Date: Fri Mar 5 14:27:13 2010 -0500
libtirpc: allow larger ticket sizes with RPCSEC_GSS
> On our Redhat server we do not have these problems. There we are running : nfs-utils-1.2.2-7
>
> Is there an explanation for these problems ? How can i find out if a client has been compiled with specific options. There is no nfs devel package for suse.
Good question... I don't think there is way to was to tell how each
binary has been compiled... but doing a ldd `which rpc.gssd` will show
which shared libraries will be used.. If libtirpc.so.1 does not show up
in that list the you know the rpc.gssd was compile with --disable-tirpc
steved.
^ permalink raw reply [flat|nested] 4+ messages in thread* Re: gssd mounts not working
2011-04-23 12:16 ` Steve Dickson
@ 2011-04-23 17:00 ` Luk Claes
2011-04-23 17:47 ` Steve Dickson
0 siblings, 1 reply; 4+ messages in thread
From: Luk Claes @ 2011-04-23 17:00 UTC (permalink / raw)
To: Steve Dickson; +Cc: Richard Smits, linux-nfs@vger.kernel.org
On 04/23/2011 02:16 PM, Steve Dickson wrote:
>
>
> On 04/21/2011 02:58 AM, Richard Smits wrote:
>> Hello,
>> We are having problems with our gssd nfs mounts. I will explain our situation.
>>
>> Our clients are running SLED 11 SP1.
>> Our server is a Netapp filer with Ontap 7.3.3P4.
>>
>> We provide NFS exported directory's with krb5 security.
>>
>> Our KDC is a Windows 2003 and 2008 Active Directory.
>>
>> If we use nfs-client-1.2.1-8.1 everything works as expected.
>>
>> But if we upgrade to (any) newer client, all gssd mounts fail. Now there is a bugreport on Novell Bugzilla about this : https://bugzilla.novell.com/show_bug.cgi?id=614293#c7
>>
>> Apperantly if the nfs client is compiled with --disable-tirpc , the ticket size from the AD is to big ?
> Yes this problem was fixed in libitrpc with:
>
> commit 599511589ca7ddb3b2eac8d3aa5b0b38be7a7691
> Author: Jeff Layton <jlayton@redhat.com>
> Date: Fri Mar 5 14:27:13 2010 -0500
>
> libtirpc: allow larger ticket sizes with RPCSEC_GSS
When will 0.2.2 be released?
Cheers
Luk
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: gssd mounts not working
2011-04-23 17:00 ` Luk Claes
@ 2011-04-23 17:47 ` Steve Dickson
0 siblings, 0 replies; 4+ messages in thread
From: Steve Dickson @ 2011-04-23 17:47 UTC (permalink / raw)
To: Luk Claes; +Cc: Richard Smits, linux-nfs@vger.kernel.org
On 04/23/2011 01:00 PM, Luk Claes wrote:
> On 04/23/2011 02:16 PM, Steve Dickson wrote:
>>
>>
>> On 04/21/2011 02:58 AM, Richard Smits wrote:
>>> Hello,
>>> We are having problems with our gssd nfs mounts. I will explain our situation.
>>>
>>> Our clients are running SLED 11 SP1.
>>> Our server is a Netapp filer with Ontap 7.3.3P4.
>>>
>>> We provide NFS exported directory's with krb5 security.
>>>
>>> Our KDC is a Windows 2003 and 2008 Active Directory.
>>>
>>> If we use nfs-client-1.2.1-8.1 everything works as expected.
>>>
>>> But if we upgrade to (any) newer client, all gssd mounts fail. Now there is a bugreport on Novell Bugzilla about this : https://bugzilla.novell.com/show_bug.cgi?id=614293#c7
>>>
>>> Apperantly if the nfs client is compiled with --disable-tirpc , the ticket size from the AD is to big ?
>> Yes this problem was fixed in libitrpc with:
>>
>> commit 599511589ca7ddb3b2eac8d3aa5b0b38be7a7691
>> Author: Jeff Layton <jlayton@redhat.com>
>> Date: Fri Mar 5 14:27:13 2010 -0500
>>
>> libtirpc: allow larger ticket sizes with RPCSEC_GSS
>
> When will 0.2.2 be released?
I'll try to get it out sometime next week...
steved.
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2011-04-23 17:48 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-04-21 6:58 gssd mounts not working Richard Smits
2011-04-23 12:16 ` Steve Dickson
2011-04-23 17:00 ` Luk Claes
2011-04-23 17:47 ` Steve Dickson
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox