2006-03-01 15:57:24

by Gopal Santhanam

[permalink] [raw]
Subject: NFSv3 + Kerberos + x86_64 (Fedora Core 4)

Hi all,

I have been using FC4's kernel-2.6.15-1.1831 on both
i686 and x86_64 architecture machines.

I want to use NFSv3 with Kerberos. =A0This works fine
on i686 with the aforementioned FC4 kernel. =A0I am
able to do the following:

1) Setup NFS server with kerberos

2) Mount on NFS client with -o sec=3Dkrb5.


Now, if I have (1) on i686 and do (2) on x86_64, things just=20
break:

{root@x86_64client:3:~} mount -o sec=3Dkrb5=20
server:/export/test /mnt
{root@x86_64client:4:~} ls -al /mnt
ls: /mnt: Broken pipe



The clients are setup exactly the same
(both have /etc/krb5.keytab, /etc/idmapd.conf).=20
They are both running rpc.idmapd and rpc.gssd.

An important thing to mention is that rpc.gssd is still running
after the mount command but then has vanished (crashed?) after=20
the ls.

This has got to be a known problem. =A0How do I fix it?

Thanks,
Gopal


p.s. I have not tried the latest patches from CITI, but that's
always a royal pain in the ass (see my recent message about
compile errors with the latest patches). =A0For example, even
the last version that I compiled
(linux-2.6.16-rc1-CITI_NFS4_ALL-4.diff) was acting strangely
on i686.


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
NFS maillist - [email protected]
https://lists.sourceforge.net/lists/listinfo/nfs


2006-03-01 16:57:51

by Gopal Santhanam

[permalink] [raw]
Subject: Re: [NFS] NFSv3 + Kerberos + x86_64 (Fedora Core 4)

That did the trick!

Thanks for the help and the ultra-speedy reply!

Gopal


On Wednesday 01 March 2006 08:52, Steve Dickson wrote:
> Gopal Santhanam wrote:
> > Hi all,
> >
> > I have been using FC4's kernel-2.6.15-1.1831 on both
> > i686 and x86_64 architecture machines.
> >
> > I want to use NFSv3 with Kerberos. This works fine
> > on i686 with the aforementioned FC4 kernel. I am
> > able to do the following:
> >
> > 1) Setup NFS server with kerberos
> >
> > 2) Mount on NFS client with -o sec=krb5.
> >
> >
> > Now, if I have (1) on i686 and do (2) on x86_64, things just
> > break:
> >
> > {root@x86_64client:3:~} mount -o sec=krb5
> > server:/export/test /mnt
> > {root@x86_64client:4:~} ls -al /mnt
> > ls: /mnt: Broken pipe
> >
> >
> >
> > The clients are setup exactly the same
> > (both have /etc/krb5.keytab, /etc/idmapd.conf).
> > They are both running rpc.idmapd and rpc.gssd.
> >
> > An important thing to mention is that rpc.gssd is still
> > running after the mount command but then has vanished
> > (crashed?) after the ls.
>
> Try changing the library in /etc/gssapi_mech.conf from
> /usr/lib/libgssapi_krb5.so to simply libgssapi_krb5.so.2
>
> steved.

2006-03-01 16:53:43

by Steve Dickson

[permalink] [raw]
Subject: Re: NFSv3 + Kerberos + x86_64 (Fedora Core 4)



Gopal Santhanam wrote:
> Hi all,
>
> I have been using FC4's kernel-2.6.15-1.1831 on both
> i686 and x86_64 architecture machines.
>
> I want to use NFSv3 with Kerberos. This works fine
> on i686 with the aforementioned FC4 kernel. I am
> able to do the following:
>
> 1) Setup NFS server with kerberos
>
> 2) Mount on NFS client with -o sec=krb5.
>
>
> Now, if I have (1) on i686 and do (2) on x86_64, things just
> break:
>
> {root@x86_64client:3:~} mount -o sec=krb5
> server:/export/test /mnt
> {root@x86_64client:4:~} ls -al /mnt
> ls: /mnt: Broken pipe
>
>
>
> The clients are setup exactly the same
> (both have /etc/krb5.keytab, /etc/idmapd.conf).
> They are both running rpc.idmapd and rpc.gssd.
>
> An important thing to mention is that rpc.gssd is still running
> after the mount command but then has vanished (crashed?) after
> the ls.
Try changing the library in /etc/gssapi_mech.conf from
/usr/lib/libgssapi_krb5.so to simply libgssapi_krb5.so.2

steved.


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
NFS maillist - [email protected]
https://lists.sourceforge.net/lists/listinfo/nfs