So I am having to solve and re-visit this problem... I've tried various OSes (Solaris10/Opensolaris/MacOSX/Debian) and ngroup_max settings, some work for local filesystems but not over NFSv4.
On each server and client I've run newkey -h server/client and I've even done this on the NIS master and pumped the keys out using the publickey file. Nothing seems to be working... why? Am I missing out a step here? Help or hints will be appreciated!
One thought is to make absolutely sure you are mounting using NFS Version 4 by specifiying that in the mount line, .e.g:
Code:
mount -o vers=4 nfs_server:/export_path /mount_point
Or amend /etc/default/nfs to prevent the system dropping back to NFS V3 or V2 (a bit drastic though).
The other suggestion is confirm that the kernel change has been picked up by running:
Code:
getconf -a | grep ngroups
in order to check what the kernel reports the maximum number of groups to be. Saying that on boot you get a warning message about having more than 16 groups will break with NFS V3 which should be obvious enough.
The increasing of the number of groups is only a case of putting the line into /etc/system, e.g.:
Code:
set ngroups_max=32
and rebooting, it is not a hack but a long recognised but little used configuration change due to the NFS problem.
Many thanks for the reply and ideas. I have checked all that's suggested and they are all correct, but this still does not work, and still hangs.
I think the current problem is to do with the authentication keys... please help! Here are some log messages:
Code:
client# mount -F nfs -o vers=4,sec=dh server:/var/tmp/test /mnt
nfs mount: mount: /mnt: Invalid argument
client# tail messages
Feb 15 12:42:21 client rpcsec: [ID 270986 kern.notice] NOTICE: authdes_create: unable to get client's netname: RPC: Timed out (error 5)
Feb 15 12:49:19 client last message repeated 3 times
Feb 15 12:49:19 client nfs: [ID 120876 kern.warning] WARNING: NFS server initial call to server failed: Invalid argument
What RPC service should be running? NIS (ypbind) certainly is...
---------- Post updated at 03:53 PM ---------- Previous update was at 01:24 PM ----------
More error messages:
Code:
Feb 15 13:13:20 client rpcsec: [ID 270986 kern.notice] NOTICE: authdes_create: unable to get client's netname: RPC: Timed out (error 5)
Feb 15 13:16:51 client last message repeated 1 time
Feb 15 13:20:19 client rpcsec: [ID 270986 kern.notice] NOTICE: authdes_create: unable to get client's netname: RPC: Timed out (error 5)
Feb 15 13:20:19 client nfs: [ID 120876 kern.warning] WARNING: NFS server initial call to server failed: Invalid argument
Feb 15 13:35:07 client rpcsec: [ID 270986 kern.notice] NOTICE: authdes_create: unable to get client's netname: RPC: Timed out (error 5)
Feb 15 13:42:06 client last message repeated 3 times
Feb 15 13:42:06 client nfs: [ID 120876 kern.warning] WARNING: NFS server initial call to server failed: Invalid argument
What other services do I need to run? (ypbind is certainly running)...
Two suggestions:
1. Make an alternative mount point to /mnt, e.g. /mount and try it.
2. Can the NFS server ping the client by name and can the NFS client ping the server by name? If not then either put their names and IP addresses in the each ends hosts files or else put them into the NIS hosts table.
1. Done this and it does not work (so mount point /mnt is not the problem).
2. Yes, and yes. In fact a normal NFS share (without the sec=dh) shares and mounts (on /mnt) no problems. So I assume it is all to do with keys and AUTH_DH authentication and the mounting method. Anyone got any suggestions on how to do this..?
Recently I did what I was hesitant to do for years, I purged all forum Underground (UG) members who had not been active within a certain period.
We need to change the UG membership criteria (from mod voting) and create a new criteria for UG membership which is not based on "voting" because mods... (13 Replies)
Hi,
As per my knowledge, the maximum number of groups that can be allocated to a folder (in Solaris 10) is 16. But I wonder how this rule is applicable to folders which are mounted on NFS which can be accessed by 100s of groups? or is there is a restriction present? I have never handled such a... (5 Replies)
Discussion started by: poga
5 Replies
3. Post Here to Contact Site Administrators and Moderators
On Solaris, a user is limited to being a member of a maximum of 16 groups. Could someone tell me where this limit comes from, i.e. is it NIS, or Solaris, or NFS that is imposing this limit?
What is the work-around to remove this limitation? (4 Replies)
I have a unix box which runs as a webserver and ftp server. I have a user account for a friend and while I trust him, I noticed that he can view directories above his own "web" folder which is his default directory.
I'm still trying to understand users/groups and privileges so bear with me if... (2 Replies)
Discussion started by: creyc
2 Replies
6. Post Here to Contact Site Administrators and Moderators
