Bug#738063: nfs-kernel-server: option to disable NFSv4 in /etc/default/nfs-kernel-server not working properly

[Ben Hutchings]

On Wed, 2017-05-10 at 16:49 -0700, Nye Liu wrote:
> On Sat, Apr 15, 2017 at 05:09:18AM +0100, Ben Hutchings wrote:
> > This bug report has severity 'normal', which does not justify an NMU. 
> > Also, as we are approaching the release of Debian 9 'stretch', even
> > updates by a maintainer should only fix important bugs.
> 
> I don't think "normal" makes sense, since as it is, this bug breaks all
> networks that depend on NFSv2 to function, or depend on NFSv4 to be disabled.
> 
> As an aside, it appears that using systemd (ironically) avoids this, since
> /usr/lib/systemd/scripts/nfs-utils_env.sh
> appears to do the right thing, unlike /etc/init.d/nfs-kernel-server

Indeed - only unusual configurations (sysvinit plus odd NFS version
requirements) are not working.

Ben.

-- 
Ben Hutchings
I say we take off; nuke the site from orbit.  It's the only way to be
sure.



signature.asc
Description: This is a digitally signed message part

Bug#738063: nfs-kernel-server: option to disable NFSv4 in /etc/default/nfs-kernel-server not working properly

[Nye Liu]

On Sat, Apr 15, 2017 at 05:09:18AM +0100, Ben Hutchings wrote:
> This bug report has severity 'normal', which does not justify an NMU. 
> Also, as we are approaching the release of Debian 9 'stretch', even
> updates by a maintainer should only fix important bugs.

I don't think "normal" makes sense, since as it is, this bug breaks all
networks that depend on NFSv2 to function, or depend on NFSv4 to be disabled.

As an aside, it appears that using systemd (ironically) avoids this, since
/usr/lib/systemd/scripts/nfs-utils_env.sh
appears to do the right thing, unlike /etc/init.d/nfs-kernel-server

Bug#738063: nfs-kernel-server: option to disable NFSv4 in /etc/default/nfs-kernel-server not working properly

[Ben Hutchings]

On Fri, 2017-04-14 at 20:19 -0700, Nye Liu wrote:
> Is anyone maintaining this package?

Daniel Pocock has been doing a fair amount of work on it.

> Is it possible to put this patch into an NMU?

This bug report has severity 'normal', which does not justify an NMU. 
Also, as we are approaching the release of Debian 9 'stretch', even
updates by a maintainer should only fix important bugs.

Ben.

-- 
Ben Hutchings
Larkinson's Law: All laws are basically false.



signature.asc
Description: This is a digitally signed message part

Bug#738063: nfs-kernel-server: option to disable NFSv4 in /etc/default/nfs-kernel-server not working properly

[Nye Liu]

Is anyone maintaining this package?

Is it possible to put this patch into an NMU?

Bug#738063: nfs-kernel-server: option to disable NFSv4 in /etc/default/nfs-kernel-server not working properly

[Nye Liu]

On Thu, 2 Feb 2017 21:55:28 -0800 Nye Liu  wrote:
> This bug is still not fixed.
>
> In addition, it doesn't appear as though "-V 2" will enable NFSv2, 
which seems to

> be disabled by default now.

Even worse, the old nfs-common script would automatically enable statd, 
idmapd, and gssd if needed.


Not sure about idmapd and gssd, but nothing automatically enables statd 
any longer - it has to be enabled manually via "systemctl enable rpc-statd."


This is very unexpected behavior for anyone wishing to run nfs v2 and/or v3

Bug#738063: nfs-kernel-server: option to disable NFSv4 in /etc/default/nfs-kernel-server not working properly

[Nye Liu]

This bug is still not fixed.

In addition, it doesn't appear as though "-V 2" will enable NFSv2, which seems 
to
be disabled by default now.

Bug#738063: nfs-kernel-server: option to disable NFSv4 in /etc/default/nfs-kernel-server not working properly

[Wolodja Wentland]

Hello,

this problem just came up in #debian and it took us a while to arrive at
the same conclusion (and patch) as detailed in this bug report. It would
be appreciated if the patch could be included as this would allow
users in a similar situation to solve it immediately.

Thank you!
-- 
Wolodja 

4096R/CAF14EFC
081C B7CD FF04 2BA9 94EA  36B2 8B7F 7D30 CAF1 4EFC

Bug#738063: nfs-kernel-server: option to disable NFSv4 in /etc/default/nfs-kernel-server not working properly

[Cedric Barboiron]

Package: nfs-kernel-server
Severity: normal
Tags: patch

Instructions to disable NFSv4 in /etc/default/nfs-kernel-server aren't properly
preventing clients to mount the export using NFSv4.

We had to pass the option '--no-nfs-version 4' to mountd *and* nfsd. I found at
least one similar case and solution at
http://andy.delcambre.com/2007/06/25/disabling-nfsv4-on-ubuntu.html

Here is a patch to add a NONFSVERSION option int /etc/default/nfs-kernel-server
and pass it to both daemons. Alternatively or in addition to this one, we could
add a RPCNFSDOPTS as suggested in bug #539201.

*** 0001-default-init-fix-no-nfs-version-4.patch
From 8cb1b55667fec17b12a9805600417105a203c32c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20Barboiron?= c...@winkie.fr
Date: Fri, 7 Feb 2014 11:53:32 +0100
Subject: [PATCH] default/init: fix --no-nfs-version 4

---
 debian/nfs-kernel-server.default | 4 +++-
 debian/nfs-kernel-server.init| 7 ---
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/debian/nfs-kernel-server.default b/debian/nfs-kernel-server.default
index 16c0532..4ffd383 100644
--- a/debian/nfs-kernel-server.default
+++ b/debian/nfs-kernel-server.default
@@ -8,9 +8,11 @@ RPCNFSDPRIORITY=0
 # If you have a port-based firewall, you might want to set up
 # a fixed port here using the --port option. For more information, 
 # see rpc.mountd(8) or http://wiki.debian.org/SecuringNFS
-# To disable NFSv4 on the server, specify '--no-nfs-version 4' here
 RPCMOUNTDOPTS=--manage-gids
 
+# To disable NFSv4 on the server, specify '--no-nfs-version 4' here
+NONFSVERSION=
+
 # Do you want to start the svcgssd daemon? It is only required for Kerberos
 # exports. Valid alternatives are yes and no; the default is no.
 NEED_SVCGSSD=
diff --git a/debian/nfs-kernel-server.init b/debian/nfs-kernel-server.init
index d00b2ec..07d1526 100644
--- a/debian/nfs-kernel-server.init
+++ b/debian/nfs-kernel-server.init
@@ -31,6 +31,7 @@ RPCMOUNTDOPTS=
 NEED_SVCGSSD=no
 RPCSVCGSSDOPTS=
 PROCNFSD_MOUNTPOINT=/proc/fs/nfsd
+NONFSVERSION=
 if [ -f $DEFAULTFILE ]; then
 . $DEFAULTFILE
 fi
@@ -100,7 +101,7 @@ case $1 in
 
start-stop-daemon --start --oknodo --quiet \
--nicelevel $RPCNFSDPRIORITY \
-   --exec $PREFIX/sbin/rpc.nfsd -- $RPCNFSDCOUNT
+   --exec $PREFIX/sbin/rpc.nfsd -- $RPCNFSDCOUNT $NONFSVERSION
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
@@ -118,7 +119,7 @@ case $1 in
fi
 
$PREFIX/bin/rpcinfo -u localhost nfs 3 /dev/null 21 ||
-   RPCMOUNTDOPTS=$RPCMOUNTDOPTS --no-nfs-version 3
+   NONFSVERSION=$NONFSVERSION --no-nfs-version 3
 
[ -z $ClearAddr ] || echo nfsd 127.0.0.1 1 
/proc/net/rpc/auth.unix.ip/channel

@@ -136,7 +137,7 @@ case $1 in
 
log_progress_msg mountd
start-stop-daemon --start --oknodo --quiet \
-   --exec $PREFIX/sbin/rpc.mountd -- $RPCMOUNTDOPTS
+   --exec $PREFIX/sbin/rpc.mountd -- $RPCMOUNTDOPTS 
$NONFSVERSION
RET=$?
if [ $RET != 0 ]; then
log_end_msg $RET
-- 
1.8.5.3


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org