NFSv4 + Kerberos + users

[Kevin Coffman]

On 6/19/07, Zoltan Menyhart <Zoltan.Menyhart at bull.net> wrote:
>
> Well, I've got no special configuration. No NIS at all.
> The network configuration is:
>
> There are two test machines (lucy1_10g & lucy1_10g) connected directly to each
> other on a private LAN, not routed to the global net.
> These machines are connected to a third machine that is the KDC, via another
> interfaces (lucy1 & lucy1).
>
> The test machines have their addresses in /etc/hosts:
>
> 174.16.110.71   lucy1_10g.frec.bull.fr lucy1_10g
> 174.16.110.72   lucy2_10g.frec.bull.fr lucy2_10g
> 172.16.110.71   lucy1.frec.bull.fr lucy1
> 172.16.110.72   lucy2.frec.bull.fr lucy2
>
> The KDC is our local name sarver (the test machines are not).
>
> "hostname" gives lucy1_10g.frec.bull.fr & lucy2_10g.frec.bull.fr.
>
> How I set up the test environment?
>
> I downloaded
> http://www.citi.umich.edu/projects/nfsv4/linux/libgssapi/libgssapi-0.11.tar.gz
>
> I carried out:
>
> ./configure
> make
> make install
>
> I downloaded
> http://www.citi.umich.edu/projects/nfsv4/linux/librpcsecgss/librpcsecgss-0.14.tar.gz
>
> ./configure
> make
> make install
>
> (Similarly for the nfsutils.)
> In order to reduce the complexity, I wrote a small test that repruduces
> the data corruption without the NFS operation.
> (I posted it last week.)
>
> I put on our FTP server:
> ftp://visibull.frec.bull.fr/pub/linux/gss-test.tar.bz2
> that includes librpcsecgss-0.14 and libgssapi-0.11 in their actual,
> compiled state.
>
> The test program is librpcsecgss-0.14/test.c. I compiled it as:
> cc -O2 -g test.c src/.libs/librpcsecgss.a -l gssapi
>
> Could you please have a loot at it?

I downloaded and un-tarred your code and ran a.out and the call to
authgss_create_default() fails, but I don't see the memory corruption
you are getting.  This is the same result I got when I compiled it
myself.  (I'll note that this is using the gssapi and rpcsecgss
libraries from /usr/lib rather than the ones installed in
/usr/local/lib.  Could you re-link with -Wl,-rpath=/usr/local/lib and
see if you still have the problem?

Meanwhile, I will download and install RH AS 4 and try again to
re-create your corruption problem...

K.C.