nfsv4, weird permissions

[J. Bruce Fields]

On Tue, Jun 24, 2008 at 06:32:40PM +0200, Julius wrote:
> On Tue, 2008-06-24 at 10:19 -0400, William A. (Andy) Adamson wrote:
> > Hi
> > 
> > Hmmm. 4294967294 (0xFFFFFFFE) is the uid of the nobody user, which is
> > the default used for un-mapped users. You seem to have idmapd
> > configured and running correctly on both client and server...
> > 
> > 
> > 
> > You could restart idmapd on the client and the server with verbose
> > debugging turned on - change /etc/idmapd.conf Verbosity=0 to say,
> > Verbosity=5 and restart idmapd. This will prod idmapd to show the
> > mapping it is doing.
> 
> 
> rpc.idmapd[5058]: nfsdopenone:
> Opening /proc/net/rpc/nfs4.nametoid/channel failed: errno 2 (No such
> file or directory)
> 
> 
> with verbosity on i got this. some occourences on google, says that nfsd
> has to be loaded on the client as well.

No, that's not necessary.

> makes this error go away, still same permissions after remount.

Right, the message isn't an error, and should be ignored.

If you're seeing the message on the *server* (and if idmapd isn't
getting a SIGHUP after that to tell it to check for this file again
after nfsd's loaded), then that could explain the problem.

What Andy was really looking for, though, was messages describing
exactly what mapping the server and client are doing for the problematic
uid and name.

(Or another way to debug this would be watch the traffic between client
and server in wireshark--what you'd look for would be a GETATTR
operation on the file which requests the owner and owner_group
attributes--and, in particular, whether the result the server returns
for that attribute is correct.)

--b.

> Btw, i can see the genius behind the idea to only output "important"
> error messages with verbosity on....
> 
> No, i cant ;)
> 
> 
> Even with Verbosity = 5 theres nothing printed to syslog, "mount -t
> nfs4....."
> > What does your /etc/nsswitch.conf look like? Is NIS or LDAP configured
> > on either the client or the server?  What are the local permissions on
> > the server for .xinitrc?
> 
> /etc/nsswitch.conf client:
> # Begin /etc/nsswitch.conf
> 
> passwd: files
> group: files
> shadow: files
> 
> publickey: files
> 
> hosts: files dns
> networks: files
> 
> protocols: db files
> services: db files
> ethers: db files
> rpc: db files
> 
> netgroup: db files
> 
> # End /etc/nsswitch.conf
> 
> 
> 
> /etc/nsswitch.conf server:
> # Begin /etc/nsswitch.conf
> 
> passwd: files
> group: files
> shadow: files
> 
> publickey: files
> 
> hosts: files dns
> networks: files
> 
> protocols: db files
> services: db files
> ethers: db files
> rpc: db files
> 
> netgroup: db files
> 
> # End /etc/nsswitch.conf