permission denied for files i own on nfs4 with kerberos

[Brian J. Murrell]

Something new this morning on my system here... something which was most definitely working yesterday, and the day before that and last week, etc:

nfs4_client $ hexdump: /usr/local/etc/Klinux_home_nsupdate+157+00000.key: Permission denied
nfs4_client $ $ ls -l /usr/local/etc
total 8
-rw------- 1 brian brian 122 2008-11-29 10:49 Klinux_home_nsupdate+157+00000.key
-rw------- 1 brian brian 138 2008-11-29 10:49 Klinux_home_nsupdate+157+00000.private
nfs4_client $ id
uid=1001(brian) gid=1001(brian)
groups=...
nfs4_client $ klist
Ticket cache: FILE:/tmp/krb5cc_1001_nqO3nJ
Default principal: brian@ILINX

Valid starting Expires Service principal
03/23/10 06:53:28 03/23/10 16:53:28 krbtgt/ILINX@ILINX
 renew until 03/24/10 06:52:44
03/23/10 06:54:14 03/23/10 16:53:28 nfs/linux.interlinx.bc.ca@ILINX
 renew until 03/24/10 06:52:44
nfs4_client $ $ grep /usr/local /proc/mounts
/etc/auto.global /usr/local autofs rw,relatime,fd=12,pgrp=13394,timeout=60,minproto=5,maxproto=5,direct 0 0
linux:/usr/local /usr/local nfs4 rw,relatime,vers=4,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=krb5,clientaddr=10.75.22.1,addr=10.75.22.3 0 0
nfs4_client $ $ grep nfs4 /proc/mounts
linux:/usr/local /usr/local nfs4 rw,relatime,vers=4,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=krb5,clientaddr=10.75.22.1,addr=10.75.22.3 0 0
linux:/mnt/mp3/ /mnt/mp3 nfs4 rw,relatime,vers=4,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=krb5,clientaddr=10.75.22.1,addr=10.75.22.3 0 0
nfs4_client $ $ hexdump /mnt/mp3/bad_mouth.mp3 | head
0000000 fbff c452 0000 3c0b 4059 9614 0100 c85c

What am I demonstrating here? Simply that trying to read from a file (/usr/local/etc/Klinux_home_nsupdate+157+00000.key) that I own mounted as a kerberized-nfs4 mount (on /usr/local) is returning EPERM yet I can read a file (/mnt/mp3/bad_mouth.mp3) from a different kerberized-nfs4 mount (/mnt/mp3) on a different filesystem with no problems.

The collateral attached to this bug are from the nfs server, which is a Lucid machine. I had to choose the client or the server to "ubuntu_bug" on and since the server is the "newest" link in the chain, I chose it.

ProblemType: Bug
Architecture: i386
Date: Tue Mar 23 07:56:46 2010
DistroRelease: Ubuntu 10.04
Package: nfs-kernel-server 1:1.2.0-4ubuntu3
ProcEnviron:
 PATH=(custom, no user)
 LANG=en_CA.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.32-16.25-generic
SourcePackage: nfs-utils
Uname: Linux 2.6.32-16-generic i686

[dino99 (9d9)]

There is no support on such deprecated version; that one has died long time ago.

[Brian J. Murrell (brian-interlinx)]

There was support when this ticket was opened, 6 years ago and then not a single thing happened with it (the ticket). It didn't even get triaged.

No wonder I don't install Ubuntu any more and am converting what few Ubuntu systems I have left to RedHat/CentOS.