search for: crossmnt

.../nfsexport/data none bind 0 0 ---8<--- AS you can see, /mnt/data is a partition mounted below /. I am binding both partitions to /nfsexport/... and export them in /etc/exports with ---8<---/etc/exports--- / server*.pamas.local(ro,secure,no_root_squash,crossmnt,fsid=0) /mnt/data server2.pamas.local(ro,secure,no_root_squash,nohide) server5.pamas.local(ro,secure,no_root_squash,nohide) ---8<--- If I execute [root at server5 ~]# /etc/init.d/nfs reload I get exportfs: /mnt/data does not support NFS export exportfs: /mnt/data does not support NFS e...

...el and nfs4. On server i have bind mounted directory shared to the client with following setup: mounted directory: /srv/nfs/imagetest on /exports/imagetest type none (rw,bind) /etc/exports file: /exports 10.0.4.0/24(ro,insecure,sync,wdelay,no_subtree_check,no_root_squash,fsid=0,crossmnt) /exports/imagetest 10.0.4.20(rw,insecure,sync,wdelay,no_subtree_check,nohide,no_root_squash) On client I have mounted it with following command: 10.0.4.2:/ on /media/nfs type nfs4 (rw,nodev,sync,proto=tcp,retry=10,rsize=32768,wsize=32768,hard,intr,addr=10.0.4.2) This works fine with...

...idmap_ldb:use rfc2307 = yes unix charset = UTF8 log level = 5 [profiles] comment = Roaming Profiles path = /data/data/profiles-nfs read only = no force create mode = 0600 force directory mode = 0700 The share ist exportet with this options: /data/data server.localdomain(rw,async,fsid=0,crossmnt,no_subtree_check,no_root_squash,insecure) Error log in log.smbd [2017/05/22 16:38:30.412365, 5] ../source3/smbd/dosmode.c:287(get_ea_dos_attribute) get_ea_dos_attribute: Cannot get attribute from EA on file demo1.V4/AppData/Roaming/Microsoft/Network: Error = Operation not supported

I was used to integrate some linux client in my samba network mounting homes with 'unix extensions = yes', and works as expected, at least with some old lubuntu derivatives. Client side i use 'pam_mount'. Now i'm working on a ubuntu mate derivative, and i've not found a way to start the session properly in CIFS. If i create a plain local home (pam_mkhome), session start as

Hi Louis, Thanks for your message. However, I already have NFS working completely. I'm only trying to work out root NFS access on the client.? I tried your NFS translation fix via idmapd.conf? but that isn't working for me. I've discovered that's because CentOS 7 is using gssproxy so apparently your fix won't work. The fix from Red Hat (adding some lines to krb.conf seen in my

...> > Examples here. > > > https://access.redhat.com/documentation/en-us/red_hat_enterpri > se_linux/5/html/deployment_guide/s1-nfs-server-config-exports > > > > This is how my export looks. > > /exports > 192.168.0.0/24(rw,sync,fsid=0,no_subtree_check,crossmnt,sec=sy > s:krb5:krb5i:krb5p) > > /exports/users > 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) > > > > I hope this helps you out. > > > > > > Greetz, > > > > Louis > > > > > >> -----Oorspronkelijk ber...

...did you setup the exports, did you define the pseudo NFS4 root. Examples here. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/5/html/deployment_guide/s1-nfs-server-config-exports This is how my export looks. /exports 192.168.0.0/24(rw,sync,fsid=0,no_subtree_check,crossmnt,sec=sys:krb5:krb5i:krb5p) /exports/users 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) I hope this helps you out. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Ver...

...= nsswitch,static [Static] HOSTNAME$@YOUR.REALM = root I've mapped a server (user=computer$ ) to root. But i do advice start without this, its kind of a 'last resort' to try to make something work. > > e) defined export dirs > /srv 192.168.0.0/24(rw,sync,fsid=0,crossmnt,no_subtree_check,sec=sys:krb5:krb5i:krb5p) > /srv/backups 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) Yes, for the server only. Based on the /home/users example above can be 2 diffent setups. 1) as shown above /srv 192.168.0.0/24(rw,sync,fsid=0,crossmnt,no_s...

...rnal.domain.tld > > Local-Realm = YOUR.REALM > > > > kinit Administrator > > net ads keytab add nfs/hostname1.internal.domain.tld at YOUR.REALM -k > > > > # The NFS server. /etc/exports cointains now. > > /srv > 192.168.0.0/24(rw,sync,fsid=0,crossmnt,no_subtree_check,sec=sy > s:krb5:krb5i:krb5p) > > /srv/backups > 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) > > > > > > # For the Clients. > > apt-get install nfs-common > > > > kinit Administrator > > # Todo on the NF...

...idmap_ldb:use rfc2307 = yes unix charset = UTF8 log level = 5 [profiles] comment = Roaming Profiles path = /data/data/profiles-nfs read only = no force create mode = 0600 force directory mode = 0700 The share ist exportet with this options: /data/data server.localdomain(rw,async,fsid=0,crossmnt,no_subtree_check,no_root_squash,insecure) Error log in log.smbd [2017/05/22 16:38:30.412365, 5] ../source3/smbd/dosmode.c:287(get_ea_dos_attribute) get_ea_dos_attribute: Cannot get attribute from EA on file demo1.V4/AppData/Roaming/Microsoft/Network: Error = Operation not supported

...' /etc/default/nfs-common Idmap.conf Add in [general] Domain = internal.domain.tld Local-Realm = YOUR.REALM kinit Administrator net ads keytab add nfs/hostname1.internal.domain.tld at YOUR.REALM -k # The NFS server. /etc/exports cointains now. /srv 192.168.0.0/24(rw,sync,fsid=0,crossmnt,no_subtree_check,sec=sys:krb5:krb5i:krb5p) /srv/backups 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) # For the Clients. apt-get install nfs-common kinit Administrator # Todo on the NFSv4 client net ads keytab add nfs/hostname2.internal.domain.tld at REALM -k sed -i '...

...;> > >> https://access.redhat.com/documentation/en-us/red_hat_enterpri >> se_linux/5/html/deployment_guide/s1-nfs-server-config-exports >> > >> > This is how my export looks. >> > /exports >> 192.168.0.0/24(rw,sync,fsid=0,no_subtree_check,crossmnt,sec=sy >> s:krb5:krb5i:krb5p) >> > /exports/users >> 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) >> > >> > I hope this helps you out. >> > >> > >> > Greetz, >> > >> > Louis >> > &gt...

...ep the enctypes the same. ## NFS SERVER ## For NfsV4 server, with kerberos homes', that stopped working somewhere in jessie. You can set in the nfs server to support all settings so you can test when needed. In /etc/exports /exports 192.168.0.0/24(rw,sync,fsid=0,no_subtree_check,crossmnt,sec=sys:krb5:krb5i:krb5p) /exports/users 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) With in systemd the following : cat /etc/systemd/system/exports-users.mount [Unit] Description=NFS export (/exports/users) Wants=network-online.target [Mount] What=/home/samba/users Where...

...in [general] > Domain = internal.domain.tld > Local-Realm = YOUR.REALM > > kinit Administrator > net ads keytab add nfs/hostname1.internal.domain.tld at YOUR.REALM -k > > # The NFS server. /etc/exports cointains now. > /srv > 192.168.0.0/24(rw,sync,fsid=0,crossmnt,no_subtree_check,sec=sy > s:krb5:krb5i:krb5p) > /srv/backups > 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) > > > # For the Clients. > apt-get install nfs-common > > kinit Administrator > # Todo on the NFSv4 client > net ads keytab add n...

...by root and the group is 4294967294 Yes, the nfsv4 acls and system acl over kerberos doent match anymore. This is a know problem and i dont know when it wil be fixed. I use atm this for for the NFS Server. # Test all sec variable. /exports 192.168.0.0/24(rw,sync,fsid=0,no_subtree_check,crossmnt,sec=sys:krb5:krb5i:krb5p) /exports/users 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) This gives the option to test all sec= settings. Now if you use sys, ( not kerberos ) all right work ok and you should have a 100% match. I've tried with one of the latest libnfsidmap...

...servers. Others are fine. We've tried this in multiple RHEL servers with the same effect.? Connecting to a Suse or Solaris server shows the entire root of the server (or all the exported shasres and their dies in full. The server exporting it's root (/) is doing so with *(rw) and adding crossmnt, no_hide and no_sub_tree_checking in the /etc/exports makes no difference and indeed a dir list of the /net/<server B> shows everything normally with r/w as would be expected from the OS Only when samba accesses that share does it stop processing directory entries after the first one - which...

...: apt install samba winbind acl xattr nfs-common nfs-kernel-server nfs4-acl-tools krb5-user NFS client: apt install winbind acl xattr nfs-common nfs4-acl-tools krb5-user Example Setup NFS SERVER on server1. ### Example /etc/exports /exports 192.168.0.0/24(rw,sync,fsid=0,no_subtree_check,crossmnt,sec=sys:krb5:krb5i:krb5p) /exports/users 192.168.0.0/24(rw,sync,no_subtree_check,sec=sys:krb5:krb5i:krb5p) With these options sec=sys:krb5:krb5i:krb5p You can setup with any other server with or without kerberos, if it didnt work, try sec=sys in a client, if that works, well, then you setup n...

Hi everyone, I have a samba DC, let's call it dc1.ad.example.com. I have two members of the domain - server1.ad.example.com and server2.ad.example.com.?? They are not running smbd and winbind. Instead, they are running SSSD with AD backend. I want to create an NFSv4 export on server1.ad.example.com and mount it on server2.ad.example.com (say, sec=krb5). I found some instructions online

Thanks Luc, First, can I just use the small /etc/krb5.conf suggested in Samba AD docs or do I need something more substantial on the server & client for Kerberos NFS to work? [libdefaults]         default_realm = SUBDOMAIN.DOMAIN.COM         dns_lookup_realm = false         dns_lookup_kdc = true I understand a /etc/krb5.keytab file has to be created on both server & client. Most

Hi Is there any way to re-export an nfs mounted directory? I am having three servers runnning on centos4.5 and i am trying to implement nfs share in an below manner [bcoz there is no alternative way for me to setup nfs share] HOST A--->>>EXPORTS /prod/data ------->>>HOST B HOST B ---->>MOUNTED ------>>> /prod/data-----UNDER---/PROD1 [working fine] HOST B