From: Helge Bahmann Subject: Re: lockd and krb5 Date: Sun, 19 Nov 2006 18:31:57 +0100 Message-ID: <200611191831.58047.hcb@chaoticmind.net> References: <200611161137.28079.hcb@chaoticmind.net> <200611170922.40447.hcb@chaoticmind.net> <20061117184438.GF11882@fieldses.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Return-path: Received: from sc8-sf-mx2-b.sourceforge.net ([10.3.1.92] helo=mail.sourceforge.net) by sc8-sf-list2-new.sourceforge.net with esmtp (Exim 4.43) id 1GlqWi-0004Th-Es for nfs@lists.sourceforge.net; Sun, 19 Nov 2006 09:32:20 -0800 Received: from m4s07.vlinux.de ([83.151.27.105]) by mail.sourceforge.net with esmtps (TLSv1:DES-CBC3-SHA:168) (Exim 4.44) id 1GlqWe-0000Ky-B8 for nfs@lists.sourceforge.net; Sun, 19 Nov 2006 09:32:18 -0800 To: "J. Bruce Fields" , nfs@lists.sourceforge.net In-Reply-To: <20061117184438.GF11882@fieldses.org> List-Id: "Discussion of NFS under Linux development, interoperability, and testing." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: nfs-bounces@lists.sourceforge.net Errors-To: nfs-bounces@lists.sourceforge.net Am Freitag, 17. November 2006 19:44 schrieben Sie: > On Fri, Nov 17, 2006 at 09:22:40AM +0100, Helge Bahmann wrote: > > > > > Is the KDE startup that often triggers this at initial login, or at > > > > > some other time? > > > > > > > > seems completely erratic; it happens both at initial login as well as > > > > second login (after successful logout, but before credentials > > > > expire); if there is any regularity at all then it seems that initial > > > > login seems more likely to succeed > > > > > > Is the filesystem exported under both secuirty flavors (krb5 and sys), > > > with the export options otherwise the same? > > > > it is exported to the following clients: > > *(ro,all_sqash,fsid=9) > > test.client.for.auth_unix(rw,sync,fsid=9) > > gss/krb5(rw,sync,fsid=9) > > Do you see the same problems if your exports all have the same options? > E.g. > > *(rw,sync,fsid=9) > gss/krb5(rw,sync,fsid=9) this seems kind of pointless because then I would be exporting the whole filesystem with "sys" security which is exactly what I want to avoid but AFAIC remember the server had an active export entry with sys security for the test machine with the exact same options as for gss/krb5, only "world" export was marked ro,all_squash during the gss test but I will make sure to include this when I try to capture traffic logs next week Best regards ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ NFS maillist - NFS@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfs