Calum Mackay wrote: > Note also, that although NFSv4 uses strings for uid/gid/domain, the > underlying RPC layer uses the same authentication credentials as in > previous NFS versions and other RPC programs. > > Since it's the RPC authentication that is used to control access, etc, > don't expect too much from the NFSv4 name/id mapping. It's useful for ls > -l listings, etc, but not for authentication. >
Thank you very much. That is a clear explanation of what is going on, and give the background why the AUTH_SYS fail to work as mentioned yesterday by Nicolas. So in the end NFSv4 idmap'ing is working exactly as I understood and expected (the output of ls -l worked when looking at the mounted home directory). It is just that I did not understand that the RPC transport which does access to the files (directory listings within the home directory, in this case) does not do string name based mapping. Just out of curiosity, is there a reason that RPC wasn't updated to match the upper-level semantics with similar mechanics? It basically shatters the wonderful illusion setup by NFSv4. -- paul
