hi all,

we have a similar problem with debian and netapp, when we try to use
netapp vol with 'all_squash' behaviour

netapp vol nfs export options:
...,anon=8000,sec=none,rw,...

on debian-stable (lenny), using the latest available nfs-common
(1:1.1.2-6lenny1) there is no way to mount netapp vol with this config.

we also tested the latest unstable nfs-utils pkg (1:1.2.2-1), but
doesn't help.

finally we tried to use mount.nfs binary from RHEL-5 (very dirty way),
the mount was successfull and everything looks good.

according this, we found bug/patch in RHEL bugzilla
-patch: https://bugzilla.redhat.com/attachment.cgi?id=138345
-diff: https://bugzilla.redhat.com/attachment.cgi?id=138345&action=diff
-bug: https://bugzilla.redhat.com/show_bug.cgi?id=187370

applying the patch on debian src pkg we got correct/working version of
nfs-common

please, could you investigate this RH patch and if possible apply it in
the future releases of nfs-common?

thank you very much

regards
Tomas Benedykt

--

Ing. Tomáš Benedykt

senior linux administrator

E-mail: tomas.benedykt@centrumholdings.com
Tel.: (+420) 739 500 840

Centrum Holdings | Classic 7, Jankovcova 1037/49, 170 00 Praha 7
www.centrumholdings.com

Aktualne.cz | Atlas.cz | Centrum.cz | ICQ | Zena.cz

On Fri, 2010-06-11 at 14:50 +0200, Tomas Benedykt wrote:
> hi all,
>
> we have a similar problem with debian and netapp, when we try to use
> netapp vol with 'all_squash' behaviour
>
> netapp vol nfs export options:
> ...,anon=8000,sec=none,rw,...
>
> on debian-stable (lenny), using the latest available nfs-common
> (1:1.1.2-6lenny1) there is no way to mount netapp vol with this config.
>
> we also tested the latest unstable nfs-utils pkg (1:1.2.2-1), but
> doesn't help.

Have you specified sec=none in the client's mount options?

[...]
> according this, we found bug/patch in RHEL bugzilla
> -patch: https://bugzilla.redhat.com/attachment.cgi?id=138345
> -diff: https://bugzilla.redhat.com/attachment.cgi?id=138345&action=diff
> -bug: https://bugzilla.redhat.com/show_bug.cgi?id=187370
[...]

That bug has already been fixed in nfs-utils, but in a different way.

Ben.

--
Ben Hutchings
Once a job is fouled up, anything done to improve it makes it worse.

Dne 12.6.2010 03:25, Ben Hutchings napsal(a):
> On Fri, 2010-06-11 at 14:50 +0200, Tomas Benedykt wrote:
>> hi all,
>>
>> we have a similar problem with debian and netapp, when we try to use
>> netapp vol with 'all_squash' behaviour
>>
>> netapp vol nfs export options:
>> ...,anon=8000,sec=none,rw,...
>>
>> on debian-stable (lenny), using the latest available nfs-common
>> (1:1.1.2-6lenny1) there is no way to mount netapp vol with this config.
>>
>> we also tested the latest unstable nfs-utils pkg (1:1.2.2-1), but
>> doesn't help.
>
> Have you specified sec=none in the client's mount options?
>
> [...]

I hope, the following commands will better explain the behaviour of
debian | rhel mount.nfs versus netapp with sec=none option.



netapp export:
--------------
netapp> exportfs
/vol/test1 -sec=none,rw,anon=1006


RHEL binary:
------------
nfs-cl:/mnt# /root/tb/mount.nfs.rhel filer1:/vol/test1 /mnt/tb/

nfs-cl:/mnt# ls -la tb
total 8
drwxr-xr-x 3 1006 1006 4096 Jun 14 11:43 .
drwxr-xr-x 7 root root 59 May 27 18:58 ..
drwxrwxrwx 2 root root 4096 Jun 14 11:21 .snapshot

nfs-cl:/mnt# id
uid=0(root) gid=0(root) groups=0(root)

nfs-cl:/mnt# touch /mnt/tb/aaa

nfs-cl:/mnt# ls -la tb
total 8
drwxr-xr-x 3 1006 1006 4096 Jun 14 11:48 .
drwxr-xr-x 7 root root 59 May 27 18:58 ..
drwxrwxrwx 2 root root 4096 Jun 14 11:21 .snapshot
-rw-r--r-- 1 1006 1006 0 Jun 14 11:48 aaa

nfs-cl:/mnt# su - www-data
www-data@nfs-cl:/$ id
uid=33(www-data) gid=33(www-data) groups=33(www-data)

www-data@nfs-cl:/$ touch /mnt/tb/www

www-data@nfs-cl:/$ ls -la /mnt/tb/
total 8
drwxr-xr-x 3 1006 1006 4096 Jun 14 11:49 .
drwxr-xr-x 7 root root 59 May 27 18:58 ..
drwxrwxrwx 2 root root 4096 Jun 14 11:21 .snapshot
-rw-r--r-- 1 1006 1006 0 Jun 14 11:48 aaa
-rw-r--r-- 1 1006 1006 0 Jun 14 11:49 www

www-data@nfs-cl:/$ mv /mnt/tb/aaa /mnt/tb/aaa.rhel
www-data@nfs-cl:/$ mv /mnt/tb/www /mnt/tb/www.rhel

www-data@nfs-cl:/$ ls -al /mnt/tb
total 8
drwxr-xr-x 3 1006 1006 4096 Jun 14 11:49 .
drwxr-xr-x 7 root root 59 May 27 18:58 ..
drwxrwxrwx 2 root root 4096 Jun 14 11:21 .snapshot
-rw-r--r-- 1 1006 1006 0 Jun 14 11:48 aaa.rhel
-rw-r--r-- 1 1006 1006 0 Jun 14 11:49 www.rhel

nfs-cl:/mnt# umount tb



DEBIAN-MOUNT.NFS (default)
--------------------------

nfs-cl:/mnt# mount filer1:/vol/test1 /mnt/tb/

nfs-cl:/mnt# df -h
Filesystem Size Used Avail Use% Mounted on
filer1:/vol/test1
- - - - /mnt/tb

nfs-cl:/mnt# touch /mnt/tb/aaa
touch: cannot touch `/mnt/tb/aaa': Permission denied

nfs-cl:/mnt# id
uid=0(root) gid=0(root) groups=0(root)

nfs-cl:/mnt# umount tb



DEBIAN-MOUNT.NFS (-o sec=sys)
-----------------------------

nfs-cl:/mnt# mount filer1:/vol/test1 /mnt/tb/ -o sec=sys
mount.nfs: filer1:/vol/test1 failed, security flavor not supported

nfs-cl:/mnt# df -h
Filesystem Size Used Avail Use% Mounted on
<-not-mounted->



DEBIAN-MOUNT.NFS (-o sec=none)
------------------------------

nfs-cl:/mnt# mount filer1:/vol/test1 /mnt/tb/ -o sec=none
nfs-cl:/mnt# df -h
Filesystem Size Used Avail Use% Mounted on
filer1:/vol/test1
- - - - /mnt/tb


>> according this, we found bug/patch in RHEL bugzilla
>> -patch: https://bugzilla.redhat.com/attachment.cgi?id=138345
>> -diff: https://bugzilla.redhat.com/attachment.cgi?id=138345&action=diff
>> -bug: https://bugzilla.redhat.com/show_bug.cgi?id=187370
> [...]
>
> That bug has already been fixed in nfs-utils, but in a different way.
>
> Ben.
>

On Mon, 2010-06-14 at 12:59 +0200, Tomas Benedykt wrote:
>
> Dne 12.6.2010 03:25, Ben Hutchings napsal(a):
> > On Fri, 2010-06-11 at 14:50 +0200, Tomas Benedykt wrote:
> >> hi all,
> >>
> >> we have a similar problem with debian and netapp, when we try to use
> >> netapp vol with 'all_squash' behaviour
> >>
> >> netapp vol nfs export options:
> >> ...,anon=8000,sec=none,rw,...
> >>
> >> on debian-stable (lenny), using the latest available nfs-common
> >> (1:1.1.2-6lenny1) there is no way to mount netapp vol with this config.
> >>
> >> we also tested the latest unstable nfs-utils pkg (1:1.2.2-1), but
> >> doesn't help.
> >
> > Have you specified sec=none in the client's mount options?
> >
> > [...]
>
> I hope, the following commands will better explain the behaviour of
> debian | rhel mount.nfs versus netapp with sec=none option.
[...]
> DEBIAN-MOUNT.NFS (-o sec=none)
> ------------------------------
>
> nfs-cl:/mnt# mount filer1:/vol/test1 /mnt/tb/ -o sec=none
> nfs-cl:/mnt# df -h
> Filesystem Size Used Avail Use% Mounted on
> filer1:/vol/test1
> - - - - /mnt/tb

So at this point are you unable to access files under /mnt/tb?

Ben.

--
Ben Hutchings
Once a job is fouled up, anything done to improve it makes it worse.

Dne 15.6.2010 03:01, Ben Hutchings napsal(a):
> On Mon, 2010-06-14 at 12:59 +0200, Tomas Benedykt wrote:
>>
>> Dne 12.6.2010 03:25, Ben Hutchings napsal(a):
>>> On Fri, 2010-06-11 at 14:50 +0200, Tomas Benedykt wrote:
>>>> hi all,
>>>>
>>>> we have a similar problem with debian and netapp, when we try to use
>>>> netapp vol with 'all_squash' behaviour
>>>>
>>>> netapp vol nfs export options:
>>>> ...,anon=8000,sec=none,rw,...
>>>>
>>>> on debian-stable (lenny), using the latest available nfs-common
>>>> (1:1.1.2-6lenny1) there is no way to mount netapp vol with this config.
>>>>
>>>> we also tested the latest unstable nfs-utils pkg (1:1.2.2-1), but
>>>> doesn't help.
>>>
>>> Have you specified sec=none in the client's mount options?
>>>
>>> [...]
>>
>> I hope, the following commands will better explain the behaviour of
>> debian | rhel mount.nfs versus netapp with sec=none option.
> [...]
>> DEBIAN-MOUNT.NFS (-o sec=none)
>> ------------------------------
>>
>> nfs-cl:/mnt# mount filer1:/vol/test1 /mnt/tb/ -o sec=none
>> nfs-cl:/mnt# df -h
>> Filesystem Size Used Avail Use% Mounted on
>> filer1:/vol/test1
>> - - - - /mnt/tb
>
> So at this point are you unable to access files under /mnt/tb?
>

yes, at this point, i am unable to access mount dir.

nfs-cl:~# mount filer1:/vol/test1 /mnt/tb/ -o sec=none

nfs-cl:~# df -h
Filesystem Size Used Avail Use% Mounted on
filer1:/vol/test1
- - - - /mnt/tb

nfs-cl:~# touch /mnt/tb/aaa
touch: cannot touch `/mnt/tb/aaa': Permission denied

nfs-cl:~# ls -la /mnt/tb/
ls: cannot open directory /mnt/tb/: Permission denied


tb.

> Ben.
>