I didn't get your hosts.allow...

but is the LNX20012 guest is multihomed?  It might be going out the other
subnet for one reason or another and backhauling in causing the security
violation since it would be coming from an unauthorized subnet.







"Wolfe, Gordon W" <[EMAIL PROTECTED]>
Sent by: Linux on 390 Port <[EMAIL PROTECTED]>
02/20/2004 01:22 PM
Please respond to Linux on 390 Port


        To:     [EMAIL PROTECTED]
        cc:
        Subject:        [LINUX-390] Can't mount nfs


Okay, folks, I've got a strange one here.  this one has stumped my
resident Unix experts that have been helping me with Linux/390 for two
years.

I've got two SLES8 servers on a VM LPAR connected via a guest lan.

One server (LINUXVM1) is a repository for all the CDs and patches that
SuSE sends me so I can share them out among the various servers.  The /cd
directory contains the entire contents to be shared.  The /etc/exports
file reads:

/cd                      *(ro,no_root_squash,async)

and /etc/hosts.allow  contains

Another server (LNX20012) wants to mount this directory, and does so with
the command

mount -t nfs -o ro linuxvm1.ca.boeing.com:/cd /cd

which gives the result

"mount: linuxvm1.ca.boeing.com:/cd failed, reason given by server:
Permission denied"

On LINUXVM1, the /var/log/messages file has these entries:

"Feb 20 10:10:59 linuxvm1 rpc.mountd: authenticated mount request from
192.76.218
.147:855 for /cd (/cd)
Feb 20 10:10:59 linuxvm1 rpc.mountd: getfh failed: Operation not
permitted"

the wierd part is that this error appears to be unique to the LNX20012
server.  I can mount this directory from half a dozen other SLES8 servers.
 All the servers are on the same 192.76.218. subnet, which are all allowed
by subnet in the /etc/hosts.allow file.

I've tried disabling the /etc/hosts file jus in case I had a wrong IP
address there, but it didn't help.

The folks on this list have proved their brilliance in the past.  Can you
do it again?  Where can I look for the discrepancy?

"The Definition of a gentleman is a man who can play the banjo -- and
don't!"
-Mark Twain

Gordon Wolfe, Ph. D. (425)865-5940
VM Technical Services, The Boeing Company

Reply via email to