From: Trond Myklebust Subject: Re: NFS inconsistent behaviour Date: Wed, 18 Oct 2006 15:26:20 -0400 Message-ID: <1161199580.6095.112.camel@lade.trondhjem.org> References: <46465bb30610160013v47524589g39c61465b5955f65@mail.gmail.com> <20061016084656.GA13292@janus> <46465bb30610160235m211910b6g2eb074aa23060aa9@mail.gmail.com> <20061016093904.GA13866@janus> <46465bb30610171822h3f747069ge9a170f1759af645@mail.gmail.com> <20061018063945.GA5917@janus> <1161194229.6095.81.camel@lade.trondhjem.org> <20061018183807.GA12018@janus> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Cc: Mohit Katiyar , Linux NFS mailing list , linux-kernel@vger.kernel.org Return-path: Received: from sc8-sf-mx1-b.sourceforge.net ([10.3.1.91] helo=mail.sourceforge.net) by sc8-sf-list2-new.sourceforge.net with esmtp (Exim 4.43) id 1GaH3o-00064v-75 for nfs@lists.sourceforge.net; Wed, 18 Oct 2006 12:26:43 -0700 Received: from pat.uio.no ([129.240.10.4] ident=7411) by mail.sourceforge.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.44) id 1GaH3o-0005sm-MN for nfs@lists.sourceforge.net; Wed, 18 Oct 2006 12:26:41 -0700 To: Frank van Maarseveen In-Reply-To: <20061018183807.GA12018@janus> List-Id: "Discussion of NFS under Linux development, interoperability, and testing." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: nfs-bounces@lists.sourceforge.net Errors-To: nfs-bounces@lists.sourceforge.net On Wed, 2006-10-18 at 20:38 +0200, Frank van Maarseveen wrote: > I ran out of privileged ports due to treemounting on /net from about 50 > servers. The autofs program map for this uses the "showmount" command and > that one apparently uses privileged ports too (buried inside RPC client > libs part of glibc IIRC). The combination broke autofs and a number of > other services because there were no privileged ports left anymore. Yeah. The RPC library appears to always try to grab a privileged port if it can. One solution would be to have the autofs scripts drop all privileges before calling showmount. I suppose we could also change the showmount program to create a socket that is bound to an unprivileged port, then use clnttcp_create()/clntudp_create(). We could probably do the same in the "mount" program when doing things like interrogating the portmapper, probing for rpc ports etc. The only case where mount might actually need to use a privileged port is when talking to mountd. Even then, it could be trained to first try using an unprivileged port. Cheers, Trond ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ NFS maillist - NFS@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfs