Re: UID mapping for NFS

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 2010-03-14 at 17:37 -0400, Bill Davidsen wrote:
> Tim wrote:
> > On Sat, 2010-03-13 at 18:11 -0500, Bill Davidsen wrote:
> >> The issue may be that nfs4 doesn't seem to be working, mount.nfs4
> >> gives a failure, so perhaps job one will be to find out why the export
> >> isn't working.
> > 
> > Are all the computers using the same OS?  Prior Fedora releases used a
> > lesser (than 4) version of NFS by default, and would require manual
> > configuration to use NFS4.  Other distros probably have the same issue.
> > 
> Yes, and I can't seem to get nfs4 working on the server side. I have tried 
> adding flags to the exportfs call but the ones in the manual seem to be 
> rejected. This is a set of fully updated Fedora 9 boxes, and mount.nfs4 is 
> present, but the options for export seem unsupported.
> 
> I can test using the /etc/exports file, but exporting things before doing the 
> mount on them seems to have it's own issues, and the determination of what to 
> mount for export is definitely done many seconds after boot. The NFS3 moutns 
> work fine, but access is broken.
> 
> >> NFS is so insecure by nature that it would be nice not to fight
> >> pseudo-security.
> > 
> > Yes.  I'd use it in a network where you trust people not to exploit it,
> > and can manage the configuration to connect the right user names with
> > each other.  But where you can't trust users not to exploit it, or use
> > it incorrectly, or your network is exposed to outsiders (unencrypted
> > wireless, running as part of someone else's LAN, etc.), you'd want
> > something better.
> > 
> Network security isn't the issue here, it's all a matter of uid at the moment.
----
I don't know what you have or haven't done or if you have configured
idmapd and started rcpidmapd service but here is some instructions...

http://fedorasolved.org/post-install-solutions/nfsv4-fedora

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux