[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Issues with nfs v4 and security



[snip]
 
Please don't top post.

Sorry. I didn't read Your initial message carefully. I saw that nfsv4
was failing and posted the first two checks that I'd do. I don't know
why I thought there were three boxes...

Given that you're using LDAP, what's in the "/etc/exports" on both boxes?
this is on server A
 /home/alex                  -no_root_squash,insecure,wdelay,no_subtree_check,async,mp=/home/alex 192.168.11.14/32(rw) laptop.wlan1.hme1.samad.com.au(rw) laptop.lan1.hme1.samad.com.au(rw) alex-mini.lan1.hme1.samad.com.au(rw) alex-mini.wlan1.hme1.samad.com.au(rw)  nas.lan1.hme1.samad.com.au(rw)

server B
/exports/video/cam              -no_root_squash,insecure,wdelay,no_subtree_check,async,crossmnt,mp=/exports/video 192.168.8.0/22(rw) mmac(rw,root_squash,anonuid=1025,anongid=1029)


Are "rpc.idmapd" and "rpc.gssd" running on the "bad" client?

 only rpc.idmapd is running on the bad and the good one

Do "/var/log/messages" and a verbose mount give you any information on
the failure?

so i tried a mount -v ? is that what you meant by verbose, the only thing I got was 
Mar 20 13:37:27 max rpc.idmapd[19081]: nss_getpwnam: name 'nobody' does not map into domain 'samad.com.au'
 
got me thinking my nsswitch and some other libraries are not update on server B this is the one serving up the bad mount
 
(What's the "nas:/..." mount? Shouldn't it be "nfs:/..."?)
nfs is <server>:<path> 

so I have a server nfs and a server nas


(What's the "localdoman" variable in :/etc/idmapd.conf" for?)
don't know !
 


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: [🔎] CAOdo=Sw+CTC8BBhKCb+ZPwoPw=Z9POX459OhVE4hSB0NjvEC=g@mail.gmail.com" target="_blank">http://lists.debian.org/[🔎] CAOdo=Sw+CTC8BBhKCb+ZPwoPw=Z9POX459OhVE4hSB0NjvEC=g@mail.gmail.com



Reply to: