02-22-2012
Quote:
Originally Posted by
bitlord
I was trying to install this patch from a share and for some reason, even thought I was root, It was not working. I copied the patch to /tmp, ran it and now it works. I don't know whey It worked on some servers and not others.
On an NFS share, the root account is mapped to user "nobody" unless specifically allowed by the "anon=0" option. This option can be restricted to a set of servers with the "root=access-list" option. This is likely why it works on some servers but not on others in your case.
9 More Discussions You Might Find Interesting
1. IP Networking
Hello friends I'm running Redhat 9.0 with linux kernel 2.4.20-8 & have iptables version 1.2.7a & encountering a problem that I narrate down.
I need to apply patch to my iptable and netfilter for connection tracking and load balancing that are available in patch-o-matic distribution by netfilter.... (0 Replies)
Discussion started by: Rakesh Ranjan
0 Replies
2. UNIX for Dummies Questions & Answers
hi everyone
i am attaching a java code below,
it is running perfectly fine on windows but not on unix system.
unix system is having java 1.2 environment.
and this code is java 1.1 onwards compatible.
WELL THE ERROR GIVEN IS UNKNOWN HOST EXCEPTION
plz help me out.
import java.net.*;
import... (1 Reply)
Discussion started by: parmeet
1 Replies
3. UNIX for Dummies Questions & Answers
hi !
i have the following gold pack installed,on Hp-ux 11.23 on IA64
# /usr/sbin/swlist | grep -e QPK -e GOLD -e BUNDLE11i
BUNDLE11i B.11.23.0409.3 Required Patch Bundle for HP-UX 11i v2 (B.11.23), September 2004
QPKAPPS B.11.23.0609.053a Applications Quality... (0 Replies)
Discussion started by: ayazanjum
0 Replies
4. HP-UX
hi !
i have the following gold pack installed,on Hp-ux 11.23 on IA64
# /usr/sbin/swlist | grep -e QPK -e GOLD -e BUNDLE11i
BUNDLE11i B.11.23.0409.3 Required Patch Bundle for HP-UX 11i v2 (B.11.23), September 2004
QPKAPPS B.11.23.0609.053a Applications Quality Pack Bundle for HP-UX 11i v2,... (0 Replies)
Discussion started by: ayazanjum
0 Replies
5. Shell Programming and Scripting
Hi All,
OS:AIX 5.3
I am using the following shell script for patch query but not getting the prompt to enter values for '&From_date' and '&TO_Date' in the patch query when called from the shell script as below:
patch_query.sh
============
#!/usr/bin/ksh
export DBALIST="xyz@xyz.com"... (1 Reply)
Discussion started by: a1_win
1 Replies
6. Solaris
required Solaris 5.10 Kernel patch 137111-03
required Solaris 5.10 Fibre Channel Device Driver patch 125184-08
I want to know about the descriptions and what the patches will do. I searched www.sun.com (patches/updates) but don't see I am looking for. (1 Reply)
Discussion started by: Y4Net
1 Replies
7. Solaris
Hi Admins,
I came across an error while installing patch cluster on solaris.
# ./installcluster --s10cluster
ERROR: Another instance of an install script is already running for target
boot
environment '/'.
I did killed the related processes. Now there is no any process running from ps... (1 Reply)
Discussion started by: snchaudhari2
1 Replies
8. Shell Programming and Scripting
Dear All,
while running java -version i am getting following error
/usr/lib/dld.sl: Can't find path for shared library: libjli.sl
/usr/lib/dld.sl: No such file or directory
ARIES32: Core file for PA32 application saved to /finacle/RIPU/core.java
Abort(coredump)
its creating a core dump.
... (3 Replies)
Discussion started by: ripudaman.singh
3 Replies
9. AIX
Hello AIX and Java gurus,
I have a java error that I have no clue how to resolve. I am trying to run the popular NMONVisualizer utility against a NMON dataset and getting the error as shown below:
/db2storage/NMON >java -jar NMONVisualizer_2015-02-02.jar com.ibm.nmon.ReportGenerator... (1 Reply)
Discussion started by: okonita
1 Replies
nfssec(5) File Formats Manual nfssec(5)
NAME
nfssec - overview of NFS security modes
DESCRIPTION
The mount_nfs(1M) and share_nfs(1M) commands each provide a way to specify the security mode to be used on an NFS filesystem through the
option. mode can be either or These security modes may also be added to the automount maps. Note that mount_nfs(1M) and automount(1M) do
not support at this time.
The option on the share_nfs(1M) command line establishes the security mode of NFS servers. If the NFS connection uses the NFS Version 3
protocol, the NFS clients must query the server for the appropriate mode to use. If the NFS connection uses the NFS Version 2 protocol,
then the NFS client uses the default security mode, which is currently NFS clients may force the use of a specific security mode by speci-
fying the option on the command line. However, if the filesystem on the server is not shared with that security mode, the client may be
denied access.
If the NFS client wants to authenticate the NFS server using a particular (stronger) security mode, the client wants to specify the secu-
rity mode to be used, even if the connection uses the NFS Version 3 protocol. This guarantees that an attacker masquerading as the server
does not compromise the client.
The NFS security modes are described below. Of these, the modes use the Kerberos V5 protocol for authenticating and protecting the shared
filesystems. Before these can be used, the system must be configured to be part of a Kerberos realm.
Use authentication. The user's UNIX user-id and group-ids are passed in the clear on the network, unauthenticated by the NFS server
. This is the simplest security method and requires no additional administration. It is the default used by HP-UX NFS Version 2
clients and HP-UX NFS servers.
Use a Diffie-Hellman public key system
which is referred to as in the forthcoming Internet RFC).
Use Kerberos V5 protocol to authenticate users before granting access
to the shared filesystem.
Use Kerberos V5 authentication with integrity checking (checksums) to
verify that the data has not been tampered with.
User Kerberos V5 authentication, integrity checksums, and privacy protection
(encryption) on the shared filesystem. This provides the most secure filesystem sharing, as all traffic is encrypted. It should
be noted that performance might suffer on some systems when using depending on the computational intensity of the encryption
algorithm and the amount of data being transferred.
Use null authentication
NFS clients using have no identity and are mapped to the anonymous user by NFS servers. A client using a security mode other
than the one with which an HP-UX NFS server shares the filesystem has its security mode mapped to In this case, if the filesystem
is shared with users from the client are mapped to the anonymous user.
WARNINGS
lists the NFS security services. Do not edit this file. It is not intended to be user-configurable.
FILES
NFS security service configuration file
SEE ALSO
automount(1M), mount_nfs(1M), share_nfs(1M), rpc_clnt_auth(3N), secure_rpc(3N), nfssec.conf(4).
nfssec(5)