heimdal brocken with nfs4

[Tuxist]

Binary package hint: nfs-kernel-server

Mar 16 21:49:31 wehrwolf rpc.svcgssd[5761]: entering poll
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: leaving poll
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: handling null request
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: sname = <email address hidden>
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: DEBUG: serialize_krb5_ctx: lucid version!
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: prepare_krb5_rfc1964_buffer: serializing keys with enctype 4 and length 8
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: doing downcall
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: mech: krb5, hndl len: 4, ctx len 85, timeout: 2147483647, uid: -1, gid: -1, num aux grps: 0:
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: sending null reply
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: writing message: \x \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
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: finished handling null request
Mar 16 21:49:39 wehrwolf rpc.svcgssd[5761]: entering poll
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: leaving poll
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: handling null request
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: sname = <email address hidden>
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: DEBUG: serialize_krb5_ctx: lucid version!
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: prepare_krb5_rfc1964_buffer: serializing keys with enctype 4 and length 8
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: doing downcall
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: mech: krb5, hndl len: 4, ctx len 85, timeout: 2147483647, uid: -1, gid: -1, num aux grps: 0:
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: sending null reply
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: writing message: \x \x608201f306092a864886f71201020201006e8201e2308201dea003020105a10302010ea20703050020000000a3820106618201023081ffa003020105a1101b0e57454852574f4c462e4c4f43414ca220301ea003020101a11730151b036e66731b0e77656872776f6c662e6c6f63616ca381c33081c0a003020101a103020102a281b30481b0729578cad7b878ee47426eefbc2f8ec3f8b1342928ab2673d06b61592f1269b42bb9545a5e4e840be208a378e277113e0cb2dfa2eb0a0b915c1763f58b1181ef1b81919daf2ae4d706660eeb953fab3bc262b54a89f71eac43122f333d02a34b709b2f9c8bbc979eef2afeaffe759ae35c19c66ef2bff07c2e497a22ad05c7ddb1c2869050f1a378c683f4e48ed4236ff87bc0e708fead726009f9c89221dc614af394f4e7db7948a1872ef82a51917ea481be3081bba003020101a281b30481b0105d1e5d449458456119cd136877686d773326fa5f72d9fc87f8ebbdf56bdda141aec74af96eb9d088a60276e2f36d4e4136709d8316b3e90f5ff005b0e55dac8899ac398a4eaeaf82d15607be9c556d7ad37389202df44f7f6ce2cc6a72ac36ec21c75aac0d65c96db9569e0b0366503b174864fd945df613e661ef129bdb7956bd9a8e57f0dd53da50013b482fcf0cb4a91d107d52d732684
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: finished handling null request
Mar 16 21:49:45 wehrwolf rpc.svcgssd[5761]: entering poll

[[e-mail] (j.scott.gwin)]

Thank you for reporting this problem, it helps us make Ubuntu better. Please answer a few questions:

1. Please list the exact steps we need to take to reproduce this bahavior.
2. How often does this behavior happen? Always, most of the time or occasionally?

This will help, thank you

[Tuxist (jan-koester)]

I use ubuntu 8.10 on my server and client, the kdc maschine use openbsd 4.4.

my idmapd.conf
[General]

Verbosity = 0
Pipefs-Directory = /var/lib/nfs/rpc_pipefs
Domain = WEHRWOLF.LOCAL

[Translation]

Method = nsswitch

[Mapping]

Nobody-User = nobody
Nobody-Group = nogroup

my /etc/hosts on the server
192.168.123.20 wehrwolf.local wehrwolf
127.0.0.1 wehrwolf.local

my krb5.conf (i use dns for keberos server)
[libdefaults]
        default_realm = WEHRWOLF.LOCAL
        default_tgs_enctypes = des-cbc-crc
        default_tkt_enctypes = des-cbc-crc

# The following libdefaults parameters are only for Heimdal Kerberos.
        v4_instance_resolve = false
        v4_name_convert = {
                host = {
                        rcmd = host
                        ftp = ftp
                }
                plain = {
                        something = something-else
                }
        }
        fcc-mit-ticketflags = true

[login]
        krb4_convert = true
        krb4_get_tickets = false

[Tuxist (jan-koester)]

My /etc/exports
/export/users gss/krb5(no_root_squash,rw,sync,no_subtree_check)
/export/test gss/krb5(rw,sync,no_subtree_check)

my nfs-kernel-server
# Number of servers to start up
RPCNFSDCOUNT=8

# Runtime priority of server (see nice(1))
RPCNFSDPRIORITY=0

# Options for rpc.mountd.
# If you have a port-based firewall, you might want to set up
# a fixed port here using the --port option. For more information,
# see rpc.mountd(8) or http://wiki.debian.org/?SecuringNFS
RPCMOUNTDOPTS=

# Do you want to start the svcgssd daemon? It is only required for Kerberos
# exports. Valid alternatives are "yes" and "no"; the default is "no".
NEED_SVCGSSD=yes

# Options for rpc.svcgssd.
RPCSVCGSSDOPTS="-vvv -rrr"

My etc nfs-common

# If you do not set values for the NEED_ options, they will be attempted
# autodetected; this should be sufficient for most people. Valid alternatives
# for the NEED_ options are "yes" and "no".

# Do you want to start the statd daemon? It is not needed for NFSv4.
NEED_STATD=

# Options for rpc.statd.
# Should rpc.statd listen on a specific port? This is especially useful
# when you have a port-based firewall. To use a fixed port, set this
# this variable to a statd argument like: "--port 4000 --outgoing-port 4001".
# For more information, see rpc.statd(8) or http://wiki.debian.org/?SecuringNFS
STATDOPTS="-vvv"

# Do you want to start the idmapd daemon? It is only needed for NFSv4.
NEED_IDMAPD=yes

# Do you want to start the gssd daemon? It is required for Kerberos mounts.
NEED_GSSD=yes

[Tuxist (jan-koester)]

I can't moun my nfs-volumes:
reason given by server: No such file or directory

[Steve Beattie (sbeattie)]

Discussing this with Tuxist on #ubuntu-server on irc, I am closing this bug status as invalid, as we were able to get it nfsv4+heimdal working for him. The issue was this: nfsv4 maps mounts differently than previous versions of nfs, Tuxist needed to set fsid=0 in /etc/exports on the server (and restart /etc/init.d/nfs-common) and then issue the mount command on the client *without including the server side path*; e.g.:

  mount -t nfs4 -o rw,sec=krb5p nfs.wehrwolf.local: /home

rather than issuing the nfsv3 style command:

  mount -t nfs4 -o rw,sec=krb5p nfs.wehrwolf.local:/exports/users /home

which does not work, giving the EEXIST/no such file or directory result (with the fsid=0 mapping in place, I believe the latter is asking to mount /exports/users/exports/users nfs.wehrwolf.local to /home on the client machine).

This seems ripe for conversion into a question if someone would like to make the effort and clean up the title/description. Thanks.