some groups showing as nobody but others are correct

J. Bruce Fields bfields at fieldses.org
Mon Feb 11 11:04:11 EST 2008


OK, so your network trace (sent privately) shows that the server is
actually returning "nobody" as the group owner of those files.  So the
server has a problem.

On Mon, Feb 11, 2008 at 07:38:45AM -0800, Robert Hoffman wrote:
> Additional Info!
> 
> I have more data on this problem, it appears to me that if a group has too many members (some number around 100 ) then the group processing chokes and the nfsv4 mount treats the large group (and any that follow) as nobody.

Yes, I remember now, we have seen that before:

	http://linux-nfs.org/pipermail/nfsv4/2005-September/002500.html

It's a bug in libnfsidmapd, which (from a quick check of the
libnfsidmap-0.20 code) appears to have been fixed.  Would it be possible
to retest with the latest nfs-utils and libnfsidmap code?

--b.

> 
> I checked this by taking some low member count groups that weren't showing up and moving them above the large groups in the /etc/group file and then re-exporting with NIS.  Like magic, they started to show up on my nfsv4 mounts.
> 
> Is this a known problem and has it been fixed?  Or is it a "new" bug?
> 
> Bob
> 
> --
> 
> Server is Fedora 6
> kernel : 2.6.20-1.2962.fc6
> nfs-utils.i386 1:1.0.10-14.fc6
> 
> Client is Fedora 7
> kernel : 2.6.23.1-10.fc7
> nfs-utils.i386 1:1.1.0-4.fc7
> 
> rhoffman at lts:/ # ls -alt /shared
> total 176
> drwxrwxr-x 10 admin    rcsusers           4096 2008-02-08 18:43 Students
> drwxrws---  4 root     rcsbod             4096 2008-02-08 18:40 board
> drwxrws---  5 admin    rcsadmins          4096 2008-02-08 18:40 adm
> drwxr-xr-x 27 root     root               4096 2008-02-08 14:08 ..
> drwxrwx--- 16 admin    rcsteachers        4096 2008-02-01 10:24 SchoolShare
> drwxrwsr-x  3 admin    rcsadmins          4096 2008-01-30 09:30 bin
> drwxrws---  3 root     rcsvbod            4096 2008-01-23 00:07 vboard
> drwxr-xr-x 16 volco    rcsusers           4096 2008-01-10 15:16 cvc
> drwxrwx--- 28 hfennel  rcsstudentservices 4096 2008-01-09 10:20 Student Services
> drwxr-xr-x  8 pdubler  rcsusers           4096 2008-01-08 09:55 weather
> drwxr-xr-x  7 rhoffman rcsusers           4096 2007-12-14 16:56 network
> drwxr-xr-x 22 root     root               4096 2007-11-08 14:32 .
> drwxr-xr-x  2 apache   rcswebmasters      4096 2007-10-31 07:01 secureweb
> drwxrwx---  7 jschultz rcsteachers        4096 2007-10-27 13:50 Evaluations
> drwxrwxr-x 17 admin    rcswebmasters      4096 2007-10-17 08:53 website
> drwxrws---  4 admin    rcsoffice          4096 2007-10-12 16:26 Office Files
> drwxrws---  8 admin    rcstranscripts     4096 2007-10-03 11:04 Senior Transcripts
> drwxrwx---  5 admin    rcsyearbook        4096 2007-07-31 19:36 Yearbook
> drwxrwx---  2 admin    rcsteachers        4096 2007-05-17 13:17 Teacher Forms
> drwxrwxr-x  6 admin    rcsusers           4096 2007-03-27 08:59 STARReading
> drwxrwx---  2 rbusek   rcssoapbox         4096 2006-10-18 12:58 Soapbox
> drwxrwxr-x  5 admin    rcsadmins          4096 2005-09-02 12:46 RFM
> rhoffman at lts:/ # ls -alt /nfs4/exports/shared
> total 176
> drwxrwxr-x 10 admin    nobody             4096 2008-02-08 18:43 Students
> drwxrws---  4 root     nobody             4096 2008-02-08 18:40 board
> drwxrws---  5 admin    rcsadmins          4096 2008-02-08 18:40 adm
> drwxrwx--- 16 admin    nobody             4096 2008-02-01 10:24 SchoolShare
> drwxrwsr-x  3 admin    rcsadmins          4096 2008-01-30 09:30 bin
> drwxrws---  3 root     nobody             4096 2008-01-23 00:07 vboard
> drwxr-xr-x 16 volco    nobody             4096 2008-01-10 15:16 cvc
> drwxrwx--- 28 hfennel  rcsstudentservices 4096 2008-01-09 10:20 Student Services
> drwxr-xr-x  8 pdubler  nobody             4096 2008-01-08 09:55 weather
> drwxr-xr-x  7 rhoffman nobody             4096 2007-12-14 16:56 network
> drwxr-xr-x 22 root     root               4096 2007-11-08 14:32 .
> drwxr-xr-x  2 apache   nobody             4096 2007-10-31 07:01 secureweb
> drwxrwx---  7 jschultz nobody             4096 2007-10-27 13:50 Evaluations
> drwxrwxr-x 17 admin    nobody             4096 2007-10-17 08:53 website
> drwxrws---  4 admin    rcsoffice          4096 2007-10-12 16:26 Office Files
> drwxrws---  8 admin    nobody             4096 2007-10-03 11:04 Senior Transcripts
> drwxrwx---  5 admin    nobody             4096 2007-07-31 19:36 Yearbook
> drwxr-xr-x  4 root     root               4096 2007-07-27 10:36 ..
> drwxrwx---  2 admin    nobody             4096 2007-05-17 13:17 Teacher Forms
> drwxrwxr-x  6 admin    nobody             4096 2007-03-27 08:59 STARReading
> drwxrwx---  2 rbusek   nobody             4096 2006-10-18 12:58 Soapbox
> drwxrwxr-x  5 admin    rcsadmins          4096 2005-09-02 12:46 RFM
> 
> 
> ----- Original Message ----
> From: J. Bruce Fields <bfields at fieldses.org>
> To: Robert Hoffman <robert_hoffman at yahoo.com>
> Cc: nfsv4 at linux-nfs.org
> Sent: Saturday, February 9, 2008 4:55:36 PM
> Subject: Re: some groups showing as nobody but others are correct
> 
> On Sat, Feb 09, 2008 at 01:06:56PM -0800, Robert Hoffman wrote:
> > 
> > Not possible to have a silly question, when dealing with an unknown that I represent!
> > 
> > But yes, my idmapd.conf on both server and client have the same (and correct) domain specified.
> 
> Well, to me that sounds like a bug, then, and not one I recall seeing.
> So, is there a chance you could gather together the details?:
> 
>     - nfs-utils version
>     - kernel version
>     - steps to reproduce, output from ls -l, whatever
> 
> And a network trace covering the time from the mount to the ls -l (or
> whatever) showing the incorrectly mapped group might also help.  (Just
> run tcpdump -s0 -wtmp.pcap, then mail in tmp.pcap.)
> 
> --b.
> 
> > 
> > Bob
> > 
> > ----- Original Message ----
> > From: Trond Myklebust <trond.myklebust at fys.uio.no>
> > To: Robert Hoffman <robert_hoffman at yahoo.com>
> > Cc: nfsv4 at linux-nfs.org
> > Sent: Saturday, February 9, 2008 1:05:19 PM
> > Subject: Re: some groups showing as nobody but others are correct
> > 
> > 
> > On 
> > Sat, 
> > 2008-02-09 
> > at 
> > 11:42 
> > -0800, 
> > Robert 
> > Hoffman 
> > wrote:
> > > 
> > Thanks 
> > for 
> > the 
> > response!
> > > 
> > > 
> > Yes, 
> > groups 
> > are 
> > showing 
> > fine 
> > on 
> > the 
> > server.  
> > Also, 
> > on 
> > clients 
> > that 
> > mount 
> > the 
> > partitions 
> > with 
> > my 
> > old 
> > nfs 
> > mounts 
> > show 
> > groups 
> > fine.  
> > I'm 
> > using 
> > NIS 
> > to 
> > distribute 
> > group 
> > names 
> > so 
> > everything 
> > is 
> > synchronized 
> > to 
> > a 
> > common 
> > database.  
> > > 
> > > 
> > All 
> > my 
> > GID's 
> > are 
> > in 
> > the 
> > 2000 
> > range, 
> > nothing 
> > even 
> > close 
> > to 
> > the 
> > 65k 
> > or 
> > above.  
> > Also, 
> > my 
> > longest 
> > group 
> > name 
> > (I 
> > assume 
> > you 
> > mean 
> > string 
> > length) 
> > is 
> > working, 
> > as 
> > well 
> > as 
> > short 
> > ones.  
> > I've 
> > got 
> > short 
> > and 
> > medium 
> > ones 
> > not 
> > working.
> > > 
> > > 
> > I 
> > did 
> > the 
> > following 
> > in 
> > my 
> > server 
> > exports.
> > > 
> > /home  
> >  
> > 172.17.16.0/16(rw,sync) 
> > > 
> > /exports 
> > 172.17.16.0/16(rw,sync) 
> > > 
> > /nfs4  
> >   
> >   
> >   
> >   
> >   
> >   
> >   
> >   
> >  
> > gss/krb5(rw,sync,nohide,fsid=0)
> > > 
> > /nfs4/home  
> >   
> >   
> >   
> >   
> >   
> >   
> > gss/krb5(rw,sync,nohide)
> > > 
> > /nfs4/exports  
> >   
> >   
> >   
> >   
> >  
> > gss/krb5(rw,sync,nohide)
> > > 
> > > 
> > On 
> > the 
> > client, 
> > I 
> > have 
> > the 
> > following;
> > > 
> > nfs:/home  
> >   
> >  
> > /home  
> >   
> > nfs  
> > rw,rsize=8192,wsize=8192  
> > 0 
> > 0
> > > 
> > nfs:/exports/shared  
> >   
> >  
> > /shared  
> >   
> > nfs  
> > rw,rsize=8192,wsize=8192  
> > 0 
> > 0
> > > 
> > nfs:/exports/apps  
> >   
> >  
> > /apps  
> >   
> > nfs  
> > rw,rsize=8192,wsize=8192  
> > 0 
> > 0
> > > 
> > nfs4:/  
> >   
> >   
> >   
> >   
> >   
> >   
> >   
> >   
> > /nfs4  
> >   
> >   
> >   
> >   
> >   
> >   
> >   
> >   
> >  
> > nfs4  
> >   
> > rw,sec=krb5 
> > 0 
> > 0
> > > 
> > > 
> > So 
> > I 
> > can 
> > see 
> > both 
> > the 
> > normal 
> > mounts 
> > on 
> > my 
> > client 
> > with 
> > all 
> > groups 
> > intact, 
> > and 
> > I 
> > can 
> > see 
> > the 
> > nfs4 
> > mount 
> > with 
> > the 
> > nobody 
> > mapped 
> > groups.
> > 
> > Silly 
> > question: 
> > have 
> > you 
> > checked 
> > that 
> > /etc/idmapd.conf 
> > has 
> > the 
> > same
> > value 
> > for 
> > 'Domain' 
> > on 
> > both 
> > client 
> > and 
> > server?
> > 
> > Cheers
> >   
> > Trond
> > 
> > _______________________________________________
> > NFSv4 
> > mailing 
> > list
> > NFSv4 at linux-nfs.org
> > http://linux-nfs.org/cgi-bin/mailman/listinfo/nfsv4
> > 
> > 
> > 
> > _______________________________________________
> > NFSv4 mailing list
> > NFSv4 at linux-nfs.org
> > http://linux-nfs.org/cgi-bin/mailman/listinfo/nfsv4
> _______________________________________________
> NFSv4 mailing list
> NFSv4 at linux-nfs.org
> http://linux-nfs.org/cgi-bin/mailman/listinfo/nfsv4
> 
> 
> 


More information about the NFSv4 mailing list