« December 2009
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
  
       
Today

FEEDS

SEARCH



LINKS




CONTACT
tdh
Template by
Helquin

Friday Apr 20, 2007

How to tell whether you are looking at a NFSv3 or NFSv4 mount point

This is under OpenSolaris:

[tdh@kanigix 1]> nfsstat -m /net/ultralord/f/1
/net/ultralord/f/1 from ultralord:/f/1
 Flags:         vers=4,proto=tcp,sec=sys,hard,intr,link,symlink,acl,rsize=1048576,wsize=1048576,retrans=5,timeo=600
 Attr cache:    acregmin=3,acregmax=60,acdirmin=30,acdirmax=60

Orginaly posted on NFSv4 in Action
Copyright (C) 2007, NFSv4 in Action

Wednesday Mar 15, 2006

Q6: How do I change the ID domain?

Q: How do I change the ID domain (without rebooting)?

A:

  • Data ONTAP:
    simcity> options nfs.v4.id.domain
    internal.excfb.com
    simcity> options nfs.v4.id.domain excfb.com
    simcity>
    
  • Linux:

    Edit /etc/idmapd.conf and then:

    [tdh@adept ~]> sudo chkconfig rpcidmapd reset
    [tdh@adept ~]> 
    
  • Solaris:

    Edit /etc/default/nfs and then:

    ultralord # cat /var/run/nfs4_domain
    internal.excfb.com
    ultralord # svcadm restart svc:/network/nfs/mapid
    ultralord # cat /var/run/nfs4_domain
    excfb.com
    
  • AIX 5.3:
    # chnfsdmn internal.excfb.com
    # startsrc -s nfsrgyd
    # chnfsdmn
    internal.excfb.com
    

Technorati Tags:
Orginaly posted on NFSv4 in Action
Copyright (C) 2006, NFSv4 in Action

Monday Mar 13, 2006

Q5: How do I determine which ID domain a machine belongs to?

Q: How do you determine the ID domain a machine thinks it belongs to?

A:

  • Data ONTAP:
    simcity> options nfs.v4.id.domain
    internal.excfb.com
    simcity> 
    
  • Linux:
    [tdh@adept log]> sudo cat /proc/net/rpc/nfs4.idtoname/content
    #domain type id [name]
    
  • Solaris:
    ultralord # cat /var/run/nfs4_domain
    excfb.com
    ultralord #
    

Technorati Tags:
Orginally posted on NFSv4 in Action
Copyright (C) 2006, NFSv4 in Action

Saturday Mar 04, 2006

Q4: How come I can't mount a Filer via NFSv4?

Q: How come I can't mount a Filer (i.e., running Data ONTAP) via NFSv4?

A: Out of the box, Data ONTAP comes configured with NFSv4 disabled. To enable it, toggle the option nfsv.v4.enable on:

simcity> options nfs.v4.enable on
simcity> 

Technorati Tags:
Orginally posted on NFSv4 in Action
Copyright (C) 2006, NFSv4 in Action

Q3: Why doesn't my keytab with Triple-DES work?

Q: Why doesn't my keytab work with Triple-DES?

A: Not all Kerberos implementations support Triple-DES. Solaris does, but neither of Linux nor Data ONTAP do.

If Kerberized access is not working, and non-Kerberized access is, then check out your keytab to see if Single-DES is supported. I know of 3 ways to help fix this problem:

  • Regenerate your keytab with DES support.
    • Either remove Triple-DES,
    • Or make sure DES is first. Some implementations will not work correctly if Triple-DES is first.
  • The TGS ticket enc types can be restricted on the client by changing the krb5.conf file to set the option default_tgs_enctypes to something like: des-cbc-crc.
  • Recreate the server's nfs principal to only include the single des enctype.

Technorati Tags:
Orginally posted on NFSv4 in Action
Copyright (C) 2006, NFSv4 in Action

Q2: Why do I still get nobody as an user for Data ONTAP?

Q: Why do I still get nobody as an user for Data ONTAP?

A: Because by default, Data ONTAP does not have an /etc/passwd file. You either need to enable NIS, LDAP, or create a /etc/passwd with correct content.


Technorati Tags:
Orginally posted on NFSv4 in Action
Copyright (C) 2006, NFSv4 in Action

Q1: Why do I get nobody as an user?

Q: Why do I get nobody as an user?

A: Because your idmap domains are out of whack.

[root@mrx ~]# ls -la /nfs4/will/loghyr
total 63
drwxr-xr-x  10 nobody nobody   512 Nov 10 11:02 .
drwxr-xr-x   3 root   root    4096 Nov  9 21:53 ..
drwxr-xr-x   3 nobody nobody   512 Nov  9 16:37 fedora
drwxr-xr-x  11 nobody nobody   512 Apr  4  2005 home

You can fix this in the following ways, each dependent on your OS:

  • Solaris edit /etc/default/nfs and make NFSMAPID_DOMAIN match your other box.
  • Linux edit /etc/idmapd.conf and make Domain match your other box.
  • Data ONTAP change the option nfs.v4.id.domain and make it match your other box.

I don't know how to do this for other OS variants. Please send me the details and I will add them.


Technorati Tags:
Orginally posted on NFSv4 in Action
Copyright (C) 2006, NFSv4 in Action