FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Debian > Debian Kernel

 
 
LinkBack Thread Tools
 
Old 11-08-2011, 02:06 PM
John Hughes
 
Default Bug#515754: Old client works with new or old server. New client only works with new server.

I've build a nfs server using unstable:

root@coptic:~# uname -a
Linux coptic 3.0.0-2-686-pae #1 SMP Wed Nov 2 05:29:50 UTC 2011 i686 GNU/Linux
root@coptic:~# dpkg -l nfs-common
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Description
+++-=======================-===============-==============================================
ii nfs-common 1:1.2.5-2 NFS support files common to client and server
root@coptic:~# dpkg -l nfs-kernel-server
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Description
+++-=======================-===============-==============================================
ii nfs-kernel-server 1:1.2.5-2 support for NFS kernel server
root@coptic:~# exportfs
/srv/nfs4 gss/krb5
/srv/nfs4/test gss/krb5

From a machine running unstable I can mount exports from that server:

root@cretic:~# uname -a
Linux cretic 3.0.0-2-amd64 #1 SMP Wed Nov 2 04:50:05 UTC 2011 x86_64 GNU/Linux
root@cretic:~# dpkg -l nfs-common
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Description
+++-=============-=========================-=============================================
ii nfs-common 1:1.2.5-2 NFS support files common to client and server
root@cretic:~# mount -t nfs4 -o sec=krb5 coptic:/test /mnt


From a machine running squeeze I can mount exports from the unstable
server:


root@bovic:~# uname -a
Linux bovic 2.6.32-5-686 #1 SMP Mon Oct 3 04:15:24 UTC 2011 i686 GNU/Linux
root@bovic:~# dpkg -l nfs-common
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Description
+++-==============-==============-============================================
ii nfs-common 1:1.2.2-4 NFS support files common to client and serve
root@bovic:~# umount /mnt
root@bovic:~# mount -t nfs4 -o sec=krb5 coptic:/test /mnt

I also have a nfs server running squeeze:

root@olympic:~# uname -a
Linux olympic 2.6.32-5-xen-amd64 #1 SMP Tue Mar 8 00:01:30 UTC 2011 x86_64 GNU/Linux
root@olympic:~# dpkg -l nfs-common nfs-kernel-server
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Description
+++-==============-==============-============================================
ii nfs-common 1:1.2.2-4 NFS support files common to client and serve
ii nfs-kernel-ser 1:1.2.2-4 support for NFS kernel server
root@olympic:~# exportfs
/srv/nfs4 gss/krb5
/srv/nfs4/home gss/krb5
/srv/nfs4/local
gss/krb5
root@olympic:~#

I cannot mount exports from the machine running squeeze on the machine
running unstable


Executive summary: nfs-common (rpc.gssd) 1:1.2.5-2 is broken. It can't
mount exports from older versions of nfs-kernel-server.







--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 4EB9455F.6020206@Calva.COM">http://lists.debian.org/4EB9455F.6020206@Calva.COM
 
Old 11-08-2011, 08:02 PM
Bastian Blank
 
Default Bug#515754: Old client works with new or old server. New client only works with new server.

On Tue, Nov 08, 2011 at 04:06:07PM +0100, John Hughes wrote:
> root@olympic:~# exportfs
> /srv/nfs4 gss/krb5
> /srv/nfs4/home gss/krb5
> /srv/nfs4/local
> gss/krb5

Please re-read the exports man-page. You want to use sec=. Not sure if
gss/* even works currently.

Bastian

--
Mind your own business, Spock. I'm sick of your halfbreed interference.



--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20111108210258.GA27050@wavehammer.waldi.eu.org">ht tp://lists.debian.org/20111108210258.GA27050@wavehammer.waldi.eu.org
 
Old 11-08-2011, 08:41 PM
John Hughes
 
Default Bug#515754: Old client works with new or old server. New client only works with new server.

On 11/08/2011 10:02 PM, Bastian Blank wrote:

On Tue, Nov 08, 2011 at 04:06:07PM +0100, John Hughes wrote:


root@olympic:~# exportfs
/srv/nfs4 gss/krb5
/srv/nfs4/home gss/krb5
/srv/nfs4/local
gss/krb5


Please re-read the exports man-page. You want to use sec=. Not sure if
gss/* even works currently.



man exports:

You may use the special strings "gss/krb5", "gss/krb5i", or "gss/krb5p"
to restrict access to clients using rpcsec_gss security.
However, this
syntax is deprecated; on linux kernels since 2.6.23, you should
instead

use the "sec=" export option

Well, it works for me. I'll change it to sec= since that's the new
format, but I don't see what it'll change.







--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 4EB9A200.30608@calvaedi.com">http://lists.debian.org/4EB9A200.30608@calvaedi.com
 

Thread Tools




All times are GMT. The time now is 08:07 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org