2013-11-11 18:40:33

by Christoph Hellwig

[permalink] [raw]
Subject: "NFS: v4 server 127.0.0.1 does not accept raw uid/gids. Reenabling the idmapper."

I regularly get the above message when running xfstest generic/013
against a local server. The comment in the code mentions working
around a Linux server bug, but it's not quite clear what that bug
is, and why it's still around after almost three years since it was
found.


2013-11-11 21:01:15

by Christoph Hellwig

[permalink] [raw]
Subject: Re: "NFS: v4 server 127.0.0.1 does not accept raw uid/gids. Reenabling the idmapper."

On Mon, Nov 11, 2013 at 07:11:34PM +0000, Myklebust, Trond wrote:
> The above message should be harmless.

Any reason to keep it around then?


2013-11-11 19:11:36

by Myklebust, Trond

[permalink] [raw]
Subject: Re: "NFS: v4 server 127.0.0.1 does not accept raw uid/gids. Reenabling the idmapper."


On Nov 11, 2013, at 13:40, Christoph Hellwig <[email protected]> wrote:

> I regularly get the above message when running xfstest generic/013
> against a local server. The comment in the code mentions working
> around a Linux server bug, but it's not quite clear what that bug
> is, and why it's still around after almost three years since it was
> found.

Hi Christoph,

The above message should be harmless.

A lot of servers interpreted section 5.8 of RFC3530 to mean that clients should always send user/group information in the user@domain / group@domain format, and that it should never use numeric uids and gids. However when using AUTH_SYS authentication, using numeric uids/gids make a lot of sense, and doing so ensures that upgrades from NFSv3 to NFSv4 are a lot easier. It also means that you don?t need to run the idmapper.

For that reason, when you try to use NFSv4 with AUTH_SYS these days, the Linux client will try to use numeric uids/gids, and then fall back to using user@domain/group@domain if the server doesn?t support it. The above printk is there in order to help admins to recognize that their server requires the idmapper service.

Note that you can change the default behaviour using the nfs4_disable_idmapping kernel parameter (see Documentation/kernel-parameters.txt).

Cheers
Trond