Received: by 2002:a05:6902:102b:0:0:0:0 with SMTP id x11csp1671402ybt; Thu, 2 Jul 2020 10:53:10 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxVnSq6AjKA7+E9jLK7PpZ35Zj4YZdMlDUkthVoOpqRJNoJ2PtOQFcBYTY8oDbveNKpgCpZ X-Received: by 2002:a50:e604:: with SMTP id y4mr34861469edm.373.1593712390711; Thu, 02 Jul 2020 10:53:10 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1593712390; cv=none; d=google.com; s=arc-20160816; b=il01i3pwbqdQa+nlrnNUiKg09XpvZXSvG9+6ku2+mtHpLTQ1H7/oo5YtzCNBT07dUo sEhw52o16IDqcm4a6fDu665MFZADdbahBdMNCFxLoXlhTp9nG+S6SN+0lQWsW6zAnXmv JkF4v3TzWWeJuaWG/voxgA4fNZqIUr6hTPOyqxN2RWSqT62Rl9Xyq3ytwwIVySFH81Sy CZVcRB7rgvyHTIKYNJgPIOlc4+esFtN7+apQZehLj71sHYxkcTu80q+IOa5P8tZpjqgx QEfj6QoqojlbZRmvaqTKLvz2ozyhe5rEv1E/zgRaZ5pPq5I5A0dstJAMMIDAl3gx9cZY wMCA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:to:from :dkim-signature; bh=6CXYRZjwhr+U4STstadhTct0C/Gy24S2AWu/qx+/Rkw=; b=Gou6uij63sOW8i3PJsX8qoLyPlpwvwOKtnvATkCT0dqUTHrBvoFfN/gvnNvemdHmYN ImhuP/P+uk0pv2VTHffTxcwWwq6Ddg06qUZq7wOeijjMU7FgX91IHw6UfAmh7gNiL6R/ h91hKCH958ijMsgFNU46L1N5ZL8ehmth3QX8TKgwweGYTILMB2IOa049g3IcN3hAFS9u HHXWVCqRv8l4sKcM2Upknv+hrKLjap8dmlab0AZ0xA0LvTzRPqb62e0FCxsafVB+m/HB 3kLl56/8JWTqDpDtaHi/36YGD7gF58ROGu5h/Vhbsr3w3ZjA4yPjfHFSqjERpzbJO7Te jNyw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kngnt.org header.s=mail header.b=Kk8QprG2; spf=pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-nfs-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=kngnt.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id dg8si6458652edb.184.2020.07.02.10.52.47; Thu, 02 Jul 2020 10:53:10 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kngnt.org header.s=mail header.b=Kk8QprG2; spf=pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-nfs-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=kngnt.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727773AbgGBRwp (ORCPT + 99 others); Thu, 2 Jul 2020 13:52:45 -0400 Received: from smtpq4.tb.mail.iss.as9143.net ([212.54.42.167]:47410 "EHLO smtpq4.tb.mail.iss.as9143.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726120AbgGBRwo (ORCPT ); Thu, 2 Jul 2020 13:52:44 -0400 Received: from [212.54.42.137] (helo=smtp6.tb.mail.iss.as9143.net) by smtpq4.tb.mail.iss.as9143.net with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jr3O6-0001de-Nm; Thu, 02 Jul 2020 19:52:42 +0200 Received: from 94-209-183-118.cable.dynamic.v4.ziggo.nl ([94.209.183.118] helo=mail.kngnt.org) by smtp6.tb.mail.iss.as9143.net with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1jr3O6-00FHh2-Eb; Thu, 02 Jul 2020 19:52:42 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kngnt.org; s=mail; t=1593712361; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=6CXYRZjwhr+U4STstadhTct0C/Gy24S2AWu/qx+/Rkw=; b=Kk8QprG2CoNc3KuC02FjrLjyt4NUOjI3VlC99BkJ5/TB4nRC8sbCogTRKzdPRWEWyw4VOP yW0Z8EjK6yjX1nUxrh9JggpfqlfQeNNxeG3pnIjBD9EtR5o9ngIqDwRpaCshBzvd5Ch1uM 8W1RLRniG2THH9kB/a3NOeIuTTz5haKg590HmPVc5ZnlRomrMDNDIezwylFiH0gOSIS+Qq tatHgijGC0Lzx2TgU1JF9zRihu1ktvVrLA16x2koJplvYJO2QSNdupQRYIMB+m7MCAZZVu eKyDua7wZrXSOqCzIco6OI4mx8BP7c/64HhgGFPKK7zrOVMU20dLo2uk2pLSkg== From: Felix Rubio To: Dai Ngo , linux-nfs@vger.kernel.org Subject: Re: kerberized NFSv4 client reporting operation not permitted when mounting with sec=sys Date: Thu, 02 Jul 2020 19:52:41 +0200 Message-ID: <4097833.BOCuNxM56l@polaris> In-Reply-To: References: <0593b4af8ca3fafbec59655bbb39d2b4@kngnt.org> <9e25861022acb796c35d3adb392bf4c4@kngnt.org> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-SourceIP: 94.209.183.118 X-Authenticated-Sender: f.rubiodalmau@ziggo.nl (via SMTP) X-Ziggo-spambar: / X-Ziggo-spamscore: 0.0 X-Ziggo-spamreport: CMAE Analysis: v=2.3 cv=KbhJTTQD c=1 sm=1 tr=0 a=KDOoBKh8T/kja8HrlTi2+A==:17 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=kj9zAlcOel0A:10 a=_RQrkK6FrEwA:10 a=anwlzUk7Dk_UhlGP9qEA:9 a=CjuIK1q_8ugA:10 X-Ziggo-Spam-Status: No X-Spam-Status: No X-Spam-Flag: No Sender: linux-nfs-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-nfs@vger.kernel.org Thank you Dai, Your guess is absolutely correct: Right after I send the mail, I noted that... I set it the /exports (fsid=0) to sec=*sys:*krb5:krb5i:krb5p, and then I set the depending FS to the options I wanted: fixed. I even told Benjamin Coddington, out of the happines for having solved it (it was really making me go nuts), but I forgot to tell the mailing list. Sorry for that! Thank you very much, guys! Felix