nis nfs netgroup problem

[Frank Lenaerts]

On Mon, Nov 29, 2004 at 03:34:48PM +0100, Rudy Gevaert wrote:
> Hi Frank,

Hi Rudy,

> > Looks ok but I've never seen "fully qualified" hostnames in NIS
> > context. AFAIK, NIS is "flat" i.e. does not use scoping as in DNS.
> > 
> > Could you replace testbakken (testbak.gevaert,,) with testbakken
> > (testbak,,) and retry it?
> 
> Ok, I did so:
> 
> (on the nis server:)
> testbak:~# cat /etc/netgroup 
> lappie   (duvel,,)
> testbak (testbak,,)
> gateway (gateway,,)
> ant01  (ant01,,)
> ant02  (ant02,,)
> ant03  (ant03,,)
> testbakken gateway testbak
> ants ant01 ant02 ant03
> faiclients ants testbakken gateway
> 
> 
> (on the gateway:)
> gevaert:~# cat /etc/nsswitch.conf
> passwd:         nis compat
> group:          nis compat
> shadow:         nis compat
> hosts:          files dns
> networks:       files
> protocols:      db files
> services:       db files
> ethers:         db files
> rpc:            db files
> netgroup:       nis
> 
> 
> (on the nis server:)
> testbak:~# cat /etc/nsswitch.conf
> passwd:         compat
> group:          compat
> shadow:         compat
> hosts:          files dns
> networks:       files
> protocols:      db files
> services:       db files
> ethers:         db files
> rpc:            db files
> netgroup:       nis
> 
> 
> 
> Using the program "netgroup" (out of package ng-utils):
> 
> testbak:~# netgroup -h testbakken
> testbak
> gateway
> 
> gevaert:~# netgroup -h testbakken
> testbak
> gateway
> 
> 
> (Export file on the NFS server (gateway.gevaert))
> gevaert:~# cat /etc/exports
> /ed/debmirror       10.0.0.0/255.255.255.0(ro,sync)
> /ed/fai_configdir 10.0.0.0/255.255.255.0(async,ro)
> /ed/nfsroot 10.0.0.0/255.255.255.0(async,ro,no_root_squash)
> /home @testbakken(rw,sync)
> #/home  10.0.0.0/255.255.255.0(async,rw)
> 
> This is the same showmount outputs (see before)
> 
> 
> Running:
> testbak:~# mount gateway.gevaert:/home /mnt/
> mount: gateway.gevaert:/home failed, reason given by server: Permission denied
> 
> 
> Gives in the NFS server's syslog:
> Nov 29 15:28:01 gevaert rpc.mountd: refused mount request from 10.0.0.250 for /home (/): no export entry

Could you try another test? Export /home to testbak.gevaert and try to
mount that. 

<braindump>gateway gets a mount request, gets the netgroup via nis,
gets testbak and gateway for the testbakken group, tries to verify if
testbak corresponds to the IP address it gets the mount request from
(maybe hostname resolving is not working correctly)</braindump>

> I'm puzzled...
> 
> Thanks in advance!
> Echt waar

cu,

> Rudy

-- 
lenaerts.frank at pandora.be

gpg fingerprint: A41E A399 5160 BAB9 AEF1  58F2 B92A F4AB 9FFB 3707
gpg key id: 9FFB3707

Those who do not understand Unix are condemned to reinvent it, poorly."
-- Henry Spencer

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://lists.uni-koeln.de/pipermail/linux-fai/attachments/20041130/9ba6950d/attachment.bin