Your message dated Wed, 05 Apr 2006 09:47:07 -0700 with message-id <[EMAIL PROTECTED]> and subject line Bug#294468: fixed in nfs-utils 1:1.0.7-7 has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database)
--- Begin Message ---Package: nfs-kernel-server Version: 1:1.0.6-3 Severity: normal Tags: patch (After having battled with this for a few days, I'd be inclined to set severity to RC, but it obviously isn't, so here goes at normal :-) ) There is absolutely zero sane documentation on how to get NFSv4 up in a reasonably sane way in the Debian packages. After a few days of sweating, frustration, and Google time, here are the list of catches I've encountered: - First off, if you're going to use -o sec=krb5, the client _must_ load the rpcsec_gss_krb5 kernel module -- this does not happen automatically. Failure to do so will induce obscure errors. - Second, again with krb5 security, both client _and_ server must have nfs/<hostname>@REALM entries in their keytabs. Some HOWTOs claim only certain encryption types work (des-cbc-something, IIRC); this is blatantly wrong, and will again induce obscure errors. - idmapd must run on both client and server. If "domain" is set in idmapd.conf, it must be the same on both client and server, or everything will be mapped to nobody/nogroup. - Again, if using krb5, rpc.gssd must run on the client, and rpc.svcgssd must run on the server. Anything else will _again_ lead to odd delays and obscure errors. (rpc.svcgssd from CITI's unofficial Debian repository has a habit of segfaulting, BTW, but that's another issue.) - You must mount with "-t nfs4", "-t nfs -o nfsvers=4" does _not_ work. - NFSv4 has a completely different structure for exporting stuff than anything earlier. Basically, what should be in /etc/exports is /nfs4 gss/krb5(rw,sync,fsid=0,crossmnt) /nfs4/music gss/krb5(rw,sync) /nfs4/movies gss/krb5(rw,sync) (Switch gss/krb5 for NFSv3-style hostnames if not using krb5, of course.) The things to remember here are: a) Everything is exported under one big tree, namely /nfs4, which has set fsid=0. This makes /nfs4 appear as / to external clients, so /nfs4/music becomes hostname:/music etc.. b) /nfs4/music is usually a _bind mount_ from some other place in the system (ie.: mount --bind /home/mymusic /nfs4/music.). c) The really, really, big clue here is "crossmnt". Without it, no filesystems under /nfs4 (ie. /nfs4/music) will be exported. At all. The changelog claims "crossmnt" is some kind of obsolete alias for "nohide". This is plain wrong. "crossmnt" works, "nohide" doesn't. "no_subtree_check" doesn't affect this at all. (This was the last missing piece in the puzzle :-) ) - showmount doesn't work with NFSv4 (it gives an empty list), but this is normal. The normal workaround is to mount hostname:/ and ls it. - NFSv4 currently doesn't work over IPv6. - You'll need a recent 2.6 kernel on both client and server. - nfs-user-server doesn't work for NFSv4. So, there are all the catches I can remember, learned the hard way. If you'd like to include the list above (or rewrite it), so others won't have to go through the same pain over again, I'd be delighted; I hereby place it in the public domain. I'd also be most happy rewriting it into another form (say, a HOWTO) if you feel the current form is inappropriate for inclusion in the Debian package. Thanks for the work packaging the NFSv4 stuff, BTW, and I really hope it reaches sarge :-) -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.8.1 Locale: LANG=C, LC_CTYPE=en_US.ISO8859-1 (charmap=ISO-8859-1) Versions of packages nfs-kernel-server depends on: ii debconf 1.4.42 Debian configuration management sy ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an ii libwrap0 7.6.dbs-6 Wietse Venema's TCP wrappers libra ii nfs-common 1:1.0.7-1 NFS support files common to client ii sysvinit 2.86.ds1-1 System-V like init
--- End Message ---
--- Begin Message ---Source: nfs-utils Source-Version: 1:1.0.7-7 We believe that the bug you reported is fixed in the latest version of nfs-utils, which is due to be installed in the Debian FTP archive: nfs-common_1.0.7-7_i386.deb to pool/main/n/nfs-utils/nfs-common_1.0.7-7_i386.deb nfs-kernel-server_1.0.7-7_i386.deb to pool/main/n/nfs-utils/nfs-kernel-server_1.0.7-7_i386.deb nfs-utils_1.0.7-7.diff.gz to pool/main/n/nfs-utils/nfs-utils_1.0.7-7.diff.gz nfs-utils_1.0.7-7.dsc to pool/main/n/nfs-utils/nfs-utils_1.0.7-7.dsc nhfsstone_1.0.7-7_i386.deb to pool/main/n/nfs-utils/nhfsstone_1.0.7-7_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Steinar H. Gunderson <[EMAIL PROTECTED]> (supplier of updated nfs-utils package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 5 Apr 2006 18:15:20 +0200 Source: nfs-utils Binary: nhfsstone nfs-kernel-server nfs-common Architecture: i386 source Version: 1:1.0.7-7 Distribution: unstable Urgency: high Maintainer: Steinar H. Gunderson <[EMAIL PROTECTED]> Changed-By: Steinar H. Gunderson <[EMAIL PROTECTED]> Description: nfs-common - NFS support files common to client and server nfs-kernel-server - Kernel NFS server support nhfsstone - NFS benchmark program Closes: 239286 294468 297135 345460 360420 Changes: nfs-utils (1:1.0.7-7) unstable; urgency=high . * urgency=high, fixes an RC bug. * Let the init script test for kernel support before trying to start nfs-kernel-server. (Closes: #360420) * Include help on how to activate /etc/exports changes; text from Martin Pool. (Closes: #239286) * Document sync option in exports man page. (Closes: #297135) * Give an example in /etc/exports. (Closes: #345460) * Write a mini-HOWTO on how to get NFSv4 up and running. (Closes: #294468) * Install it in debian/rules. Files: 067f26d5fa5e998e4961367bd0c821fb 104020 net standard nfs-common_1.0.7-7_i386.deb a8e26d98feafbdd928cb7359000f720e 14344 net standard nfs-utils_1.0.7-7.diff.gz bae3738a8c021b207298b09feffc38be 113786 net optional nfs-kernel-server_1.0.7-7_i386.deb bd0cd15e7c83ef28291cf3a47540c8e9 44802 net extra nhfsstone_1.0.7-7_i386.deb 7c61c5d7b7cbe920da4b34e1c5801a8c 921 net standard nfs-utils_1.0.7-7.dsc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iQCVAwUBRDPwWH7hqgLJpbVOAQLCcwQAlQ9VzBq8LPCJTQRBu22Oilbx0sN+C9og hmYawY0X0KG/SAAT0lDNtaCG7xff0gQoyYD+SKfFfT5Wb6blV4k7xoL2V5hxAtd/ rG2HNYT5LfdtgqAInB2a/xs6z+nqorAonyb1CZEocyuVqobQKit+bd2SJFYHldcv DnKuuYKiwwM= =Nq/o -----END PGP SIGNATURE-----
--- End Message ---
