[CentOS] NFS V4?

[David Dyer-Bennet]

On Wed, July 23, 2008 14:17, MJT wrote:
> On Wednesday 23 July 2008 9:55:57 am David Dyer-Bennet wrote:
>> > change which versions of NFS get mounted. I haven't had to change
>> > anything else in that file.
>>
>> I don't believe SECURE_NFS does anything; at least, it's not mentioned
>> in
>> /etc/init.d/nfs anywhere, and it's not in the nfsd man page.
>
> It is in the /etc/sysconfig/nfs file, so it does not necessarily need to
> be in
> the /etc/init.d/nfs.  It is supposed to handle authentication and you are
> having authentication problems, right?.

In the Centos RPM, there is no /etc/sysconfig/nfs file (though the
init.d/nfs script checks for one and reads it if present).

By "no reference in the init script", I'm pointing out that nothing would
be different if that variable were set that I could find.  The init script
doesn't do anything based on it, and it's not mentioned in the nfsd man
page as being used there either.

>
> I do not have your version of centos running but "SECURE_NFS" is not
> listed
> in  /etc/init.d/nfs, it IS in /etc/rpcgssd and /etc/init.d/rpcvsgssd  in
> centos 5.2, I'm betting that it is somewhat the same on your system.
>
>
> From Redhat documentation:
>
>
> https://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/en-US/Reference_Guide/s2-nfs-how-daemons.html
>
> "pc.svcgssd — This process is used by the NFS server to perform user
> authentication and is started only when SECURE_NFS=yes is set in
> the /etc/sysconfig/nfs file."
>
> "rpc.gssd — This process is used by the NFS server to perform user
> authentication and is started only when SECURE_NFS=yes is set in
> the /etc/sysconfig/nfs file."
>
> Notice that both of these talk about authentication, which is the problem
> you
> are having, right?

Yes, and they say that it doesn't happen unless that variable is set in
the sysconfig file.  That variable is not set in the sysconfig file.

I've gotten several useful pointers about the exact export syntax.  I'll
add the explicit SECURE_NFS=no to the sysconfig file rather than depending
on the default, and test the export syntax, and I forget what (I've got
notes, and I saved the email) and give these things a try; tomorrow it
looks like though, a meeting is about to burn the rest of my day.

Thanks again for your suggestions!
-- 
David Dyer-Bennet, dd-b at dd-b.net; http://dd-b.net/
Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/
Photos: http://dd-b.net/photography/gallery/
Dragaera: http://dragaera.info