Received: by 2002:a05:6902:102b:0:0:0:0 with SMTP id x11csp329406ybt; Mon, 6 Jul 2020 10:18:43 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzaaNSQy9/0ZMWEJTcgEw3UXtiVOoZuHt6PjdcCNSVdS7xxbuFzxLl53XTQIc2x2ZxcmxyK X-Received: by 2002:a17:906:3650:: with SMTP id r16mr42503107ejb.465.1594055923331; Mon, 06 Jul 2020 10:18:43 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1594055923; cv=none; d=google.com; s=arc-20160816; b=WFew6H8/C9u+ti30pCQ6aWQ1TTKw3VPSlG8KbU+WQdqbTRQaLf4kJPQ10E3TixjUVU lenH4p2HwzbjMscc2txttkjQ30mlqEQSosEgpLlZMWirfNkUxAonqCSIC/Zsxg3xgUaz jZm5t1Ol+KU4u0A10dFbbBIW5D7e2yDwomLq6VcYYmq6YwpPLrF7Nxs2Wbe5hPjIvr7X Sxfbypcn54sZO5GUTKlUG2tCajbYoFxDVipblen0ROkiOyAc2JSCPi0ocL9+iSTToLLD CJmQNnqzurXh3oy8g2iGrXe1bNjVUfM3W2cDfA28JeKNhtYT/LrdJsOn3NWnENvuTtcU SH0w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:from:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:date:dkim-signature:dkim-filter; bh=DyguAXLA+fe1ltd6naPpMwDFvMwlwoEyb3J/SrCoMUc=; b=IZCFtGGjZX0iGJDcbJVZJ3V0/U+zDs6W00ePtoDEHBoOPM9z7IwISKB2gAFg8rKGis DtKicp/3nzivRMf/dLrP6dhnLll9sjt4yPpxZqQYKNUdL2AY8YQV2tNj4UYPiXP1p9x6 k6tonuAk0eNNT+s5loX4QdJNlCGhYGBU/wqvkea+AiOqjmJ7xWILH2r5f68qPXAqa4x+ 8DaMWksNMjEZgqziRTsHIBdMH+pNdQVcke8JK4trKQfkQCJeYlLzlM2VfGRCwJ2r5g37 Ao08Rrmfx8meP7Gbt9QfKB6Mbb8N2KsnIDhl2qFbg3BuJM7gM0ZPzvW8suEqeJR5fXxG PtZA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@fieldses.org header.s=default header.b=N2RiH3Z5; spf=pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-nfs-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id dh1si13705268edb.54.2020.07.06.10.18.18; Mon, 06 Jul 2020 10:18:43 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@fieldses.org header.s=default header.b=N2RiH3Z5; spf=pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-nfs-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729503AbgGFRSI (ORCPT + 99 others); Mon, 6 Jul 2020 13:18:08 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:53904 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1729478AbgGFRSI (ORCPT ); Mon, 6 Jul 2020 13:18:08 -0400 Received: from fieldses.org (fieldses.org [IPv6:2600:3c00:e000:2f7::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 99B82C061755 for ; Mon, 6 Jul 2020 10:18:08 -0700 (PDT) Received: by fieldses.org (Postfix, from userid 2815) id DABAA153E; Mon, 6 Jul 2020 13:18:04 -0400 (EDT) DKIM-Filter: OpenDKIM Filter v2.11.0 fieldses.org DABAA153E DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fieldses.org; s=default; t=1594055884; bh=DyguAXLA+fe1ltd6naPpMwDFvMwlwoEyb3J/SrCoMUc=; h=Date:To:Cc:Subject:References:In-Reply-To:From:From; b=N2RiH3Z5XXg1+O2J5PMhFSQnNzYAG4gFV+A8lbH2beylR0H8kuu9Xy/wv3sXQiZG8 Ze9JLKMJzTKsFK5EIx2c5p2AE2tOiQaniGCK+HkiekcoPPlSc02NrfBHpMct/kuKlG Spxso3Kbr/6MYt430If5qIphlPgJ+U7qcmFksA8s= Date: Mon, 6 Jul 2020 13:18:04 -0400 To: Felix Rubio Cc: Dai Ngo , linux-nfs@vger.kernel.org Subject: Re: kerberized NFSv4 client reporting operation not permitted when mounting with sec=sys Message-ID: <20200706171804.GA31789@fieldses.org> References: <0593b4af8ca3fafbec59655bbb39d2b4@kngnt.org> <9e25861022acb796c35d3adb392bf4c4@kngnt.org> <4097833.BOCuNxM56l@polaris> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4097833.BOCuNxM56l@polaris> User-Agent: Mutt/1.5.21 (2010-09-15) From: bfields@fieldses.org (J. Bruce Fields) Sender: linux-nfs-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-nfs@vger.kernel.org On Thu, Jul 02, 2020 at 07:52:41PM +0200, Felix Rubio wrote: > Your guess is absolutely correct: Right after I send the mail, I noted that... I set it the /exports (fsid=0) to sec=*sys:*krb5:krb5i:krb5p, and then I set the depending FS to the options I wanted: fixed. I even told Benjamin Coddington, out of the happines for having solved it (it was really making me go nuts), but I forgot to tell the mailing list. Sorry for that! Note, by the way, that fsid=0 thing was required for nfsv4 exports years ago, but no longer is. It's usually better not to bother with that. --b.