NFSv4 + Kerberos + users

[Zoltan Menyhart]

Kevin Coffman wrote:
> Hi,
> I did a re-install on the IA64 to which I have access.  I installed
> Fedora 7-ia64 from SGI:
>  http://oss.sgi.com/projects/fedora/
> 
> I have not been able to re-create your segfault with this program or
> with nfs-utils.  (I configured nfs-utils with "./configure
> --without-tcp-wrappers")  I verified I'm able to do a Kerberos mount
> using my kwc at CITI.UMICH.EDU credentials.
> 
> I suspect your segfault may be caused by some kind of mismatch of one
> of the components?  Let me know a bit more about what you did to build
> nfs-utils and I'll try to help.

> Meanwhile, do you have "special" configuration?  Are you using NIS, for example?

Well, I've got no special configuration. No NIS at all.
The network configuration is:

There are two test machines (lucy1_10g & lucy1_10g) connected directly to each
other on a private LAN, not routed to the global net.
These machines are connected to a third machine that is the KDC, via another
interfaces (lucy1 & lucy1).

The test machines have their addresses in /etc/hosts:

174.16.110.71   lucy1_10g.frec.bull.fr lucy1_10g
174.16.110.72   lucy2_10g.frec.bull.fr lucy2_10g
172.16.110.71   lucy1.frec.bull.fr lucy1
172.16.110.72   lucy2.frec.bull.fr lucy2

The KDC is our local name sarver (the test machines are not).
 
"hostname" gives lucy1_10g.frec.bull.fr & lucy2_10g.frec.bull.fr.

How I set up the test environment?

I downloaded
http://www.citi.umich.edu/projects/nfsv4/linux/libgssapi/libgssapi-0.11.tar.gz

I carried out:

./configure
make
make install

I downloaded
http://www.citi.umich.edu/projects/nfsv4/linux/librpcsecgss/librpcsecgss-0.14.tar.gz

./configure
make
make install

(Similarly for the nfsutils.)
In order to reduce the complexity, I wrote a small test that repruduces
the data corruption without the NFS operation.
(I posted it last week.)

I put on our FTP server:
ftp://visibull.frec.bull.fr/pub/linux/gss-test.tar.bz2
that includes librpcsecgss-0.14 and libgssapi-0.11 in their actual,
compiled state.

The test program is librpcsecgss-0.14/test.c. I compiled it as:
cc -O2 -g test.c src/.libs/librpcsecgss.a -l gssapi

Could you please have a loot at it?

Remember to do a "kinit" and to adjust the names / addresses.

Thanks,

Zoltan