On Fri, 11 Feb 2022 19:18:32 +0100, Gert Doering <g...@greenie.muc.de> wrote:
>Hi, > >On Fri, Feb 11, 2022 at 07:10:17PM +0100, Bo Berglund wrote: >> The output of tcpdump is saved to thie file: >> http://blog.boberglund.com/tcpdump.log >> >> Does this show anything valuable? > >It says > >18:58:12.150535 ip: 192.168.119.216.2049 > 10.8.139.3.942: Flags [P.], seq >29:53, ack 289, win 508, options [nop,nop,TS val 3346628708 ecr 3593052701], >length 24: NFS reply xid 955890808 reply ERR 20: Auth Bogus Credentials (seal >broken) > >so it's not a firewall or routing thing, but you *do* talk to the >NFS server, and it's not liking the client. It seems to expect >a password or some other sort of credentials. This nfs server has been installed "ages" ago and I have used it on 3 different linux machines in order to transfer files between them. It has worked fine when the now remote client was still on my home LAN up until Wednesday this week... Then I moved it to the remote LAN when we got fiber installed there (it was on mobile broadband with metered data earlier). The remote and home networks were "wired together" using the OpenVPN client in the remote ASUS router towards my existing OpenVPN server at home. This server has been in use since about 2016 or so and was my first real Ubuntu server. It handles a lot of stuff like Subversion, my private website, video downloads and more. Given that everything else I tested before looking at the nfs connections worked really well I was surprised to see this fail so miserably. Especially that the connection fails from a client that has been working fine for a long time towards it when it was hardwired to the home LAN. And to find that an nfs server on a different device (Raspberry Pi) on the home LAN *is* accessible from the remote LAN makes it even stranger. >My next step would now involve googling for "Linux NFS server Auth Bogus >Credentials" or some variation of this and see what comes back. I did find at least one discussion of a similar problem, except there the problem seems to be persistent and non-working on a single LAN... Not my symptoms. https://serverfault.com/questions/584211/yet-another-nfs-permissions-error-linux-nfs4-access-denied-auth-bogus-credent I tried adding the insecure option as adviced to the exports file in the share definition with no change in the connectivity. >(Not having used Linux as an NFS Server in 10+ years, I have no idea >about current distributions and their ideas of NFS security) Me neither... But still it seems like it is OpenVPN that breaks the functionality... -- Bo Berglund Developer in Sweden _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
