2:35 p.m.
I got an FreeIPA Server (F27) up and running on a proxmox host in a vm fine so far with an
Centos client as an NFS-Server.
I setup a second ubuntu client (17.10) with indirect mounts for home an some storage
folders.
The home automount points are working fine but the others i cant access... i guess i could
have something to do with file permissions and maybe u can point me in the right
direction.
folder on the server for
HOME=
[root@nfs_server~]# ls -la /home/
total 22
drwx------ 2 username username 6 Dec 26 01:01 username
drwxrwxrwt 2 root root 4 Jan 6 22:41 public
STORAGE=
[root@nfs server~]# ls -la /storage/
total 32
drw-r--r-- 6 root root 6 Dec 17 02:23 .
drwxr-xr-x 21 root root 26 Jan 7 03:56 ..
drw-r--r-- 4 root root 5 Dec 12 01:08 data
drw-r-Sr-- 7 1976250001 1976250004 17 Dec 21 18:29 downloads
drwxrwxrwt 10 root root 12 Oct 15 05:58 media
drw-r--r-- 2 root root 2 Nov 13 03:34 software
UBUNTUCLIENT=
username@client:/root$ ls -la /storage/
total 9
drwxr-xr-x 6 root root 0 Jan 7 20:29 .
drwxr-xr-x 23 root root 23 Jan 7 20:29 ..
dr-xr-xr-x 2 root root 0 Jan 7 20:29 data
dr-xr-xr-x 2 root root 0 Jan 7 20:29 downloads
dr-xr-xr-x 2 root root 0 Jan 7 20:29 media
dr-xr-xr-x 2 root root 0 Jan 7 20:29 software
username@client:/root$ ls -la /home/ipa/
total 1
drwxr-xr-x 3 root root 0 Jan 7 20:29 .
drwxr-xr-x 3 root root 3 Dec 26 03:06 ..
dr-xr-xr-x 2 root root 0 Jan 7 20:29 public
if i wanna access for example the the downloads folder i get an:
username@leech:/root$ ls /storage/downloads/
ls: cannot access '/storage/downloads/': No such file or directory
actually right now it even seems that i can only access the public folder and get the same
"noch such file or directory error" if i try to access user home folder
"username".
i remember that this worked before somehow.
suspected the proxmox lxc container messing probably something up with the uids or guids?
i disabled the unpriviliged containers anyways for bugfixing.
Any Help would be much apprecciated i will provide any needed additonal logs.
3:46 p.m.
New subject: FreeIPA NFS Automount with Kerberos troubleshooting help needed
jcccb via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org> writes:
I got an FreeIPA Server (F27) up and running on a proxmox host in a
vm
fine so far with an Centos client as an NFS-Server. I setup a second
ubuntu client (17.10) with indirect mounts for home an some storage
folders. The home automount points are working fine but the others i
cant access... i guess i could have something to do with file
permissions and maybe u can point me in the right direction.
folder on the server for
HOME=
[root@nfs_server~]# ls -la /home/
total 22
drwx------ 2 username username 6 Dec 26 01:01 username
drwxrwxrwt 2 root root 4 Jan 6 22:41 public
STORAGE=
[root@nfs server~]# ls -la /storage/
total 32
drw-r--r-- 6 root root 6 Dec 17 02:23 .
drwxr-xr-x 21 root root 26 Jan 7 03:56 ..
drw-r--r-- 4 root root 5 Dec 12 01:08 data
drw-r-Sr-- 7 1976250001 1976250004 17 Dec 21 18:29 downloads
drwxrwxrwt 10 root root 12 Oct 15 05:58 media
drw-r--r-- 2 root root 2 Nov 13 03:34 software
UBUNTUCLIENT=
username@client:/root$ ls -la /storage/
total 9
drwxr-xr-x 6 root root 0 Jan 7 20:29 .
drwxr-xr-x 23 root root 23 Jan 7 20:29 ..
dr-xr-xr-x 2 root root 0 Jan 7 20:29 data
dr-xr-xr-x 2 root root 0 Jan 7 20:29 downloads
dr-xr-xr-x 2 root root 0 Jan 7 20:29 media
dr-xr-xr-x 2 root root 0 Jan 7 20:29 software
username@client:/root$ ls -la /home/ipa/
total 1
drwxr-xr-x 3 root root 0 Jan 7 20:29 .
drwxr-xr-x 3 root root 3 Dec 26 03:06 ..
dr-xr-xr-x 2 root root 0 Jan 7 20:29 public
if i wanna access for example the the downloads folder i get an:
username@leech:/root$ ls /storage/downloads/
ls: cannot access '/storage/downloads/': No such file or directory
actually right now it even seems that i can only access the public
folder and get the same "noch such file or directory error" if i try
to access user home folder "username". i remember that this worked
before somehow. suspected the proxmox lxc container messing probably
something up with the uids or guids? i disabled the unpriviliged
containers anyways for bugfixing.
Any Help would be much apprecciated i will provide any needed additonal logs.
Predictably, we need logs. Anything useful on the NFS server? The client?
Thanks,
--Robbie
12:02 a.m.
New subject: FreeIPA NFS Automount with Kerberos troubleshooting help needed
On 01/11/2018 10:46 PM, Robbie Harwood via FreeIPA-users wrote:
jcccb via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
writes:
> I got an FreeIPA Server (F27) up and running on a proxmox host in a vm
> fine so far with an Centos client as an NFS-Server. I setup a second
> ubuntu client (17.10) with indirect mounts for home an some storage
> folders. The home automount points are working fine but the others i
> cant access... i guess i could have something to do with file
> permissions and maybe u can point me in the right direction.
>
> folder on the server for
>
> HOME=
> [root@nfs_server~]# ls -la /home/
> total 22
> drwx------ 2 username username 6 Dec 26 01:01 username
> drwxrwxrwt 2 root root 4 Jan 6 22:41 public
>
>
> STORAGE=
> [root@nfs server~]# ls -la /storage/
> total 32
> drw-r--r-- 6 root root 6 Dec 17 02:23 .
> drwxr-xr-x 21 root root 26 Jan 7 03:56 ..
> drw-r--r-- 4 root root 5 Dec 12 01:08 data
> drw-r-Sr-- 7 1976250001 1976250004 17 Dec 21 18:29 downloads
> drwxrwxrwt 10 root root 12 Oct 15 05:58 media
> drw-r--r-- 2 root root 2 Nov 13 03:34 software
>
> UBUNTUCLIENT=
> username@client:/root$ ls -la /storage/
> total 9
> drwxr-xr-x 6 root root 0 Jan 7 20:29 .
> drwxr-xr-x 23 root root 23 Jan 7 20:29 ..
> dr-xr-xr-x 2 root root 0 Jan 7 20:29 data
> dr-xr-xr-x 2 root root 0 Jan 7 20:29 downloads
> dr-xr-xr-x 2 root root 0 Jan 7 20:29 media
> dr-xr-xr-x 2 root root 0 Jan 7 20:29 software
>
> username@client:/root$ ls -la /home/ipa/
> total 1
> drwxr-xr-x 3 root root 0 Jan 7 20:29 .
> drwxr-xr-x 3 root root 3 Dec 26 03:06 ..
> dr-xr-xr-x 2 root root 0 Jan 7 20:29 public
>
> if i wanna access for example the the downloads folder i get an:
>
> username@leech:/root$ ls /storage/downloads/
> ls: cannot access '/storage/downloads/': No such file or directory
>
> actually right now it even seems that i can only access the public
> folder and get the same "noch such file or directory error" if i try
> to access user home folder "username". i remember that this worked
> before somehow. suspected the proxmox lxc container messing probably
> something up with the uids or guids? i disabled the unpriviliged
> containers anyways for bugfixing.
>
> Any Help would be much apprecciated i will provide any needed additonal logs.
Predictably, we need logs. Anything useful on the NFS server? The client?
Thanks,
--Robbie
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Yup, as Robbie said, logs are needed.
Also, check usernames on all hosts with getent passwd username to see if
UID/GID is correct.
Do you have SELinux involved anywhere? Special settings are needed for NFS.
Furthermore, I'd personally not share /home to clients, but instead
create something like /export/home and put all user's homedirs in there.
Then share it via NFS. This allows you to use that exact same automount
config on all hosts incl. the NFS server.
/tony
--
Tony Albers
Systems administrator, IT-development
Royal Danish Library, Victor Albecks Vej 1, 8000 Aarhus C, Denmark.
Tel: +45 2566 2383 / +45 8946 2316
10:15 a.m.
New subject: FreeIPA NFS Automount with Kerberos troubleshooting help needed
"getent passwd" gave me on all maschines the same results
some logs from the NFS Server=
journalctl:
Jan 12 14:37:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 14:37:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 14:37:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 14:37:14 nfs_server sssd_be[216]: GSSAPI client step 2
Jan 12 14:52:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 14:52:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 14:52:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 14:52:14 nfs_server sssd_be[216]: GSSAPI client step 2
Jan 12 14:52:38 nfs_server systemd[1]: Stopping RPC security service for NFS client and
server...
Jan 12 14:52:38 nfs_server systemd[1]: Starting Preprocess NFS configuration...
Jan 12 14:52:38 nfs_server systemd[1]: Started Preprocess NFS configuration.
Jan 12 14:52:38 nfs_server systemd[1]: Starting RPC security service for NFS client and
server...
Jan 12 14:52:38 nfs_server systemd[1]: Started RPC security service for NFS client and
server.
Jan 12 14:54:29 nfs_server systemd[1]: Starting RPC bind service...
Jan 12 14:54:29 nfs_server systemd[1]: Started RPC bind service.
Jan 12 15:07:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 15:07:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 15:07:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 15:07:14 nfs_server sssd_be[216]: GSSAPI client step 2
Jan 12 15:22:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 15:22:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 15:22:14 nfs_server sssd_be[216]: GSSAPI client step 1
Jan 12 15:22:14 nfs_server sssd_be[216]: GSSAPI client step 2
Jan 12 15:25:12 nfs_server systemd[1]: Reached target Host and Network Name Lookups.
Jan 12 15:25:12 nfs_server systemd[1]: Starting Host and Network Name Lookups.
Jan 12 15:25:12 nfs_server systemd[1]: Starting Kernel Module supporting RPCSEC_GSS...
Jan 12 15:25:12 nfs_server systemd[1]: Starting Preprocess NFS configuration...
Jan 12 15:25:12 nfs_server systemd[1]: auth-rpcgss-module.service: main process exited,
code=exited, status=1/FAILURE
Jan 12 15:25:12 nfs_server systemd[1]: Failed to start Kernel Module supporting
RPCSEC_GSS.
Jan 12 15:25:12 nfs_server systemd[1]: Unit auth-rpcgss-module.service entered failed
state.
Jan 12 15:25:12 nfs_server systemd[1]: auth-rpcgss-module.service failed.
Jan 12 15:25:12 nfs_server systemd[1]: Started Preprocess NFS configuration.
Jan 12 15:25:12 nfs_server systemd[1]: Starting NFSv4 ID-name mapping service...
Jan 12 15:25:12 nfs_server systemd[1]: Starting NFS Mount Daemon...
Jan 12 15:25:12 nfs_server systemd[1]: Starting NFS status monitor for NFSv2/3
locking....
Jan 12 15:25:12 nfs_server rpc.statd[505]: Version 1.3.0 starting
Jan 12 15:25:12 nfs_server rpc.statd[505]: Flags: TI-RPC
Jan 12 15:25:12 nfs_server systemd[1]: Started NFSv4 ID-name mapping service.
Jan 12 15:25:12 nfs_server rpc.mountd[507]: Version 1.3.0 starting
Jan 12 15:25:12 nfs_server systemd[1]: Started NFS Mount Daemon.
Jan 12 15:25:12 nfs_server systemd[1]: Started NFS status monitor for NFSv2/3 locking..
Jan 12 15:25:12 nfs_server systemd[1]: Starting NFS server and services...
Jan 12 15:25:12 nfs_server systemd[1]: Started NFS server and services.
Jan 12 15:25:12 nfs_server systemd[1]: Starting Notify NFS peers of a restart...
Jan 12 15:25:12 nfs_server sm-notify[513]: Version 1.3.0 starting
Jan 12 15:25:12 nfs_server sm-notify[513]: Already notifying clients; Exiting!
Jan 12 15:25:12 nfs_server systemd[1]: Started Notify NFS peers of a restart.
Jan 12 15:26:11 nfs_server systemd[1]: Stopping RPC security service for NFS client and
server...
Jan 12 15:26:11 nfs_server systemd[1]: Starting Preprocess NFS configuration...
Jan 12 15:26:11 nfs_server systemd[1]: Started Preprocess NFS configuration.
Jan 12 15:26:11 nfs_server systemd[1]: Starting RPC security service for NFS client and
server...
Jan 12 15:26:11 nfs_server systemd[1]: Started RPC security service for NFS client and
server.
i have to do an systemctl restart rpc-gssd in the nfs_server after a reboot otherwise its
not even working with my home automount folders like mentioned in my first post.
after the restart i can access the "public" and my personal "home"
folder mounted from nfs_server:/home/& on the client at /home/ipa/username
so everythings fine with the auto.home map as far as i can tell
would be nice to fix this little anyoance anyways so i dont need to restart this servbice
everytime manually after a reboot
on the ubuntu_client=
Jan 12 14:47:11 ubuntu_client apparmor[89]: /etc/init.d/apparmor: 256:
/etc/init.d/apparmor: cannot open /sys/kernel/security/apparmor/.ns_stacked: Permission
denied
Jan 12 14:47:11 ubuntu_client apparmor[89]: * Not starting AppArmor in container
Jan 12 14:47:11 ubuntu_client apparmor[89]: ...done.
Jan 12 14:47:11 ubuntu_client systemd[1]: Started AppArmor initialization.
Jan 12 14:47:11 ubuntu_client systemd[1]: networking.service: Failed to reset
devices.list: Operation not permitted
...skipping...
Jan 12 16:45:43 ubuntu_client automount[615]: expire_cleanup: sigchld: exp 140530876737280
finished, switching from 5 to 7
Jan 12 16:45:43 ubuntu_client automount[615]: st_shutdown: state 5 path /-
Jan 12 16:45:43 ubuntu_client automount[615]: expire_cleanup: got thid 140530981533440
path /home/ipa stat 0
Jan 12 16:45:43 ubuntu_client automount[615]: expire_cleanup: sigchld: exp 140530981533440
finished, switching from 5 to 7
Jan 12 16:45:43 ubuntu_client automount[615]: st_shutdown: state 5 path /home/ipa
Jan 12 16:45:43 ubuntu_client automount[615]: expire_cleanup: got thid 140530865141504
path /storage stat 0
Jan 12 16:45:43 ubuntu_client automount[615]: expire_cleanup: sigchld: exp 140530865141504
finished, switching from 5 to 7
Jan 12 16:45:43 ubuntu_client automount[615]: st_shutdown: state 5 path /storage
Jan 12 16:45:43 ubuntu_client automount[615]: automount_path_to_fifo: fifo name
/var/run/autofs.fifo--
Jan 12 16:45:43 ubuntu_client automount[615]: shut down path /-
Jan 12 16:45:44 ubuntu_client automount[615]: umount_multi: path /home/ipa incl 0
Jan 12 16:45:44 ubuntu_client automount[615]: rm_unwanted_fn: removing directory
/home/ipa/public
Jan 12 16:45:44 ubuntu_client automount[615]: rm_unwanted_fn: removing directory
/home/ipa/username
Jan 12 16:45:44 ubuntu_client automount[615]: umounted indirect mount /home/ipa
Jan 12 16:45:44 ubuntu_client automount[615]: automount_path_to_fifo: fifo name
/var/run/autofs.fifo-home-ipa
Jan 12 16:45:44 ubuntu_client automount[615]: shut down path /home/ipa
Jan 12 16:45:44 ubuntu_client automount[615]: umount_multi: path /storage incl 0
Jan 12 16:45:44 ubuntu_client automount[615]: rm_unwanted_fn: removing directory
/storage/software
Jan 12 16:45:44 ubuntu_client automount[615]: rm_unwanted_fn: removing directory
/storage/media
Jan 12 16:45:44 ubuntu_client automount[615]: rm_unwanted_fn: removing directory
/storage/downloads
Jan 12 16:45:44 ubuntu_client automount[615]: rm_unwanted_fn: removing directory
/storage/data
Jan 12 16:45:44 ubuntu_client automount[615]: umounted indirect mount /storage
Jan 12 16:45:44 ubuntu_client automount[615]: automount_path_to_fifo: fifo name
/var/run/autofs.fifo-storage
Jan 12 16:45:44 ubuntu_client automount[615]: shut down path /storage
Jan 12 16:45:44 ubuntu_client automount[615]: autofs stopped
Jan 12 16:45:44 ubuntu_client systemd[1]: Stopped Automounts filesystems on demand.
Jan 12 16:45:44 ubuntu_client systemd[1]: autofs.service: Failed to reset devices.list:
Operation not permitted
Jan 12 16:45:44 ubuntu_client systemd[1]: Starting Automounts filesystems on demand...
Jan 12 16:45:44 ubuntu_client automount[825]: Starting automounter version 5.1.2, master
map /etc/auto.master
Jan 12 16:45:44 ubuntu_client automount[825]: using kernel protocol version 5.02
Jan 12 16:45:44 ubuntu_client automount[825]: lookup_nss_read_master: reading master file
/etc/auto.master
Jan 12 16:45:44 ubuntu_client automount[825]: do_init: parse(sun): init gathered global
options: (null)
Jan 12 16:45:44 ubuntu_client automount[825]: lookup_read_master: lookup(file): read entry
+dir:/etc/auto.master.d
Jan 12 16:45:44 ubuntu_client automount[825]: lookup_nss_read_master: reading master dir
/etc/auto.master.d
Jan 12 16:45:44 ubuntu_client automount[825]: lookup(dir): dir map /etc/auto.master.d
missing or not readable
Jan 12 16:45:44 ubuntu_client automount[825]: lookup(file): failed to read included master
map dir:/etc/auto.master.d
Jan 12 16:45:44 ubuntu_client automount[825]: lookup_read_master: lookup(file): read entry
+auto.master
Jan 12 16:45:44 ubuntu_client automount[825]: lookup_nss_read_master: reading master sss
auto.master
Jan 12 16:45:44 ubuntu_client automount[825]: do_init: parse(sun): init gathered global
options: (null)
Jan 12 16:45:44 ubuntu_client automount[825]: master_do_mount: mounting /-
Jan 12 16:45:44 ubuntu_client automount[825]: automount_path_to_fifo: fifo name
/var/run/autofs.fifo--
Jan 12 16:45:44 ubuntu_client automount[825]: lookup_nss_read_map: reading map sss
auto.direct
Jan 12 16:45:44 ubuntu_client automount[825]: do_init: parse(sun): init gathered global
options: (null)
Jan 12 16:45:44 ubuntu_client automount[825]: lookup_read_map: lookup(sss):
getautomntent_r: No such file or directory
Jan 12 16:45:44 ubuntu_client automount[825]: st_ready: st_ready(): state = 0 path /-
Jan 12 16:45:44 ubuntu_client automount[825]: master_do_mount: mounting /storage
Jan 12 16:45:44 ubuntu_client automount[825]: automount_path_to_fifo: fifo name
/var/run/autofs.fifo-storage
Jan 12 16:45:44 ubuntu_client automount[825]: lookup_nss_read_map: reading map sss
auto.storage
Jan 12 16:45:44 ubuntu_client automount[825]: do_init: parse(sun): init gathered global
options: (null)
Jan 12 16:45:44 ubuntu_client automount[825]: mounted indirect on /storage with timeout
300, freq 75 seconds
Jan 12 16:45:44 ubuntu_client automount[825]: st_ready: st_ready(): state = 0 path
/storage
Jan 12 16:45:44 ubuntu_client automount[825]: ghosting enabled
Jan 12 16:45:44 ubuntu_client automount[825]: master_do_mount: mounting /home/ipa
Jan 12 16:45:44 ubuntu_client automount[825]: automount_path_to_fifo: fifo name
/var/run/autofs.fifo-home-ipa
Jan 12 16:45:44 ubuntu_client automount[825]: lookup_nss_read_map: reading map sss
auto.home
Jan 12 16:45:44 ubuntu_client automount[825]: do_init: parse(sun): init gathered global
options: (null)
Jan 12 16:45:44 ubuntu_client automount[825]: mounted indirect on /home/ipa with timeout
300, freq 75 seconds
Jan 12 16:45:44 ubuntu_client automount[825]: st_ready: st_ready(): state = 0 path
/home/ipa
Jan 12 16:45:44 ubuntu_client automount[825]: ghosting enabled
Jan 12 16:45:44 ubuntu_client systemd[1]: Started Automounts filesystems on demand.
after an systemctl restart autofs the sssd_autfs.log looks like
I think also i have the automount setup like u suggested @Tony Brian Albers ?
root@ubuntu_client:~# automount -m
lookup_nss_read_master: reading master file /etc/auto.master
do_init: parse(sun): init gathered global options: (null)
lookup_read_master: lookup(file): read entry +dir:/etc/auto.master.d
lookup_nss_read_master: reading master dir /etc/auto.master.d
lookup(dir): dir map /etc/auto.master.d missing or not readable
lookup(file): failed to read included master map dir:/etc/auto.master.d
lookup_read_master: lookup(file): read entry +auto.master
lookup_nss_read_master: reading master sss auto.master
do_init: parse(sun): init gathered global options: (null)
autofs dump map information
===========================
global options: none configured
Mount point: /-
source(s):
lookup_nss_read_map: reading map sss auto.direct
do_init: parse(sun): init gathered global options: (null)
lookup_read_map: lookup(sss): getautomntent_r: No such file or directory
instance type(s): sss
map: auto.direct
no keys found in map
Mount point: /storage
source(s):
lookup_nss_read_map: reading map sss auto.storage
do_init: parse(sun): init gathered global options: (null)
instance type(s): sss
map: auto.storage
software | -fstype=nfs4,rw,no_root_squash,sec=krb5,soft,rsize=8192,wsize=8192
nfs_server.ipa.mydomain.example:/storage/software
data | -fstype=nfs4,rw,no_root_squash,sec=krb5,soft,rsize=8192,wsize=8192
nfs_server.ipa.mydomain.example:/storage/data
downloads | nfs_server.ipa.mydomain.example:/storage/downloads
media | nfs_server.ipa.mydomain.example:/storage/media
Mount point: /home/ipa
source(s):
lookup_nss_read_map: reading map sss auto.home
do_init: parse(sun): init gathered global options: (null)
instance type(s): sss
map: auto.home
* | nfs_server.ipa.mydomain.example:/home/&
public | nfs_server.ipa.mydomain.example:/home/public
as u can see at the indirect storage mounts i played a bit with the mount options...wich
would be recommended?
whole kerberos is working fine with no errors at the ipa server
11:47 a.m.
New subject: FreeIPA NFS Automount with Kerberos troubleshooting help needed
jcccb via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org> writes:
Jan 12 15:25:12 nfs_server systemd[1]: Starting Kernel Module
supporting RPCSEC_GSS...
Jan 12 15:25:12 nfs_server systemd[1]: Starting Preprocess NFS configuration...
Jan 12 15:25:12 nfs_server systemd[1]: auth-rpcgss-module.service: main process exited,
code=exited, status=1/FAILURE
Jan 12 15:25:12 nfs_server systemd[1]: Failed to start Kernel Module supporting
RPCSEC_GSS.
Jan 12 15:25:12 nfs_server systemd[1]: Unit auth-rpcgss-module.service entered failed
state.
Jan 12 15:25:12 nfs_server systemd[1]: auth-rpcgss-module.service failed.
Well this is the source of the problem, isn't it? I don't think NFS
brought up GSSAPI support.
Thanks,
--Robbie
11:51 a.m.
New subject: FreeIPA NFS Automount with Kerberos troubleshooting help needed
so why is it working with the home folders then?
i thought also this gets fixed by my manual systemctl restart rpc-gssd ?
if this is the error i think apparmor is involved in this….
On 12. Jan 2018, at 18:47, Robbie Harwood <rharwood(a)redhat.com>
wrote:
jcccb via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org> writes:
> Jan 12 15:25:12 nfs_server systemd[1]: Starting Kernel Module supporting
RPCSEC_GSS...
> Jan 12 15:25:12 nfs_server systemd[1]: Starting Preprocess NFS configuration...
> Jan 12 15:25:12 nfs_server systemd[1]: auth-rpcgss-module.service: main process
exited, code=exited, status=1/FAILURE
> Jan 12 15:25:12 nfs_server systemd[1]: Failed to start Kernel Module supporting
RPCSEC_GSS.
> Jan 12 15:25:12 nfs_server systemd[1]: Unit auth-rpcgss-module.service entered failed
state.
> Jan 12 15:25:12 nfs_server systemd[1]: auth-rpcgss-module.service failed.
Well this is the source of the problem, isn't it? I don't think NFS
brought up GSSAPI support.
Thanks,
--Robbie
1:56 p.m.
New subject: FreeIPA NFS Automount with Kerberos troubleshooting help needed
Jobka Wohin <schadensregulierung(a)gmail.com> writes:
so why is it working with the home folders then?
i thought also this gets fixed by my manual systemctl restart rpc-gssd ?
I'm not really sure, sorry. You might have more luck asking NFS folks?
if this is the error i think apparmor is involved in this….
Is it possible to try with apparmor disabled (or the equivalent of
`setenforce 0`)? That might help narrow down where the problem is.
Thanks,
--Robbie
2301
days inactive
2306
days old
freeipa-users@lists.fedorahosted.org
6 comments
4 participants
participants (4)
-
jcccb -
Jobka Wohin
-
Robbie Harwood -
Tony Brian Albers