search for: nfs03

...t; torch > > My question would be 'why is the OP trying to login using what appears > to be a UPN to something (standalone server) that doesn't use kerberos ?' > > More info required. > > Rowland > > > Valid question. The target server, let's call it nfs03.nix.mds.xyz shares a path via both CIFS and NFS. The said server, nfs03, is Kerberized via SSSD to a set of FreeIPA servers.? The FreeIPA servers in turn have a trust with the AD DC domain mds.xyz . nfs03 <-> FreeIPA <-> AD DC So joe at mds.xyz is an AD user presented via FreeIPA o...

...ss Port Online Pid ------------------------------------------------------------------------------ Brick gs-nfs01:/ftpdata 49154 Y 2931 Brick gs-nfs02:/ftpdata 49152 Y 29875 Brick gs-nfs03:/ftpdata 49153 Y 6987 Brick gs-nfs04:/ftpdata 49153 Y 24768 Self-heal Daemon on localhost N/A Y 2938 Self-heal Daemon on gs-nfs04 N/A Y 24788 Self-heal Daemon...

...the OP trying to login using what appears >> to be a UPN to something (standalone server) that doesn't use kerberos ?' >> >> More info required. >> >> Rowland >> >> >> > Valid question. > > > The target server, let's call it nfs03.nix.mds.xyz shares a path via > both CIFS and NFS. The said server, nfs03, is Kerberized via SSSD to a > set of FreeIPA servers.? The FreeIPA servers in turn have a trust with > the AD DC domain mds.xyz . > > nfs03 <-> FreeIPA <-> AD DC > > So joe at mds.xyz is...

Am I missing something? I don?t see where you are using the ?@? symbol anywhere. Mac is probably interpreting the parameters ?valid users? and ?write list" (correctly, I think ;-) as a LIST of 3 users: joe, at, mds.xyz or bob, at, mds.xyz. torch

...Port Online Pid > ------------------------------------------------------------------------------ > Brick gs-nfs01:/ftpdata 49154 Y 2931 > Brick gs-nfs02:/ftpdata 49152 Y > 29875 > Brick gs-nfs03:/ftpdata 49153 Y 6987 > Brick gs-nfs04:/ftpdata 49153 Y > 24768 > Self-heal Daemon on localhost N/A Y 2938 > Self-heal Daemon on gs-nfs04 N/A Y &g...

...---------------------------- > ------------------ > >> > Brick gs-nfs01:/ftpdata 49154 Y > >> > 2931 > >> > Brick gs-nfs02:/ftpdata 49152 Y > >> > 29875 > >> > Brick gs-nfs03:/ftpdata 49153 Y > >> > 6987 > >> > Brick gs-nfs04:/ftpdata 49153 Y > >> > 24768 > >> > Self-heal Daemon on localhost N/A Y > >> > 2938 >...

Hey Guy's, When the user is 'joe at mds.xyz' login works fine on Win 10. Same user types on a Mac OS gives [ Mac OS - Fails ] [2020/02/21 00:03:16.960566, 5, pid=12382, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:126(make_user_info_map) Mapping user [mds.xyz]\[joe] from workstation [SERVER-PBM] [ Win 10 - Works ] [2020/02/20 23:58:01.059514,

...-------------------------------- >> >> > Brick gs-nfs01:/ftpdata 49154 Y >> >> > 2931 >> >> > Brick gs-nfs02:/ftpdata 49152 Y >> >> > 29875 >> >> > Brick gs-nfs03:/ftpdata 49153 Y >> >> > 6987 >> >> > Brick gs-nfs04:/ftpdata 49153 Y >> >> > 24768 >> >> > Self-heal Daemon on localhost N/A Y >> >...

...sword) check_ntlm_password: Authentication for user [joe] -> [joe] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1 [2020/02/21 00:03:17.051573, 2, pid=12382, effective(0, 0), real(0, 0)] ../auth/auth_log.c:760(log_authentication_event_human_readable) Auth: [SMB2,(null)] user [NFS03]\[joe] at [Fri, 21 Feb 2020 00:03:17.051454 EST] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [JOHN-PC] remote host [ipv4:192.168.0.6:55405] mapped to [NFS03]\[joe]. local host [ipv4:192.168.0.125:445] [2020/02/21 00:03:17.051751, 5, pid=12382, effective(0, 0), real(0, 0)] ../sour...

...2020 21:59:16.669942 EST] with [N| Auth: [SMB2,(null)] user [joe-PC]\[joe] at [Sat, 22 Feb 2020 21:54:48.742407 EST] with [NT SPNEGO login failed: NT_STATUS_NO_SUCH_USER | SPNEGO login failed: NT_STATUS_NO_SUCH_USER Got user=[joe] domain=[NFS03] workstation=[MACBOOKPRO-0138] len1=24 len2=222 | -------------------------------------------------------------------------------------------- doing parameter security = user | doing parameter security = user doing p...

On Fri, 2020-02-21 at 20:48 -0500, TomK wrote: > > > > > > "Sadly this really appears to be is a client issue. You see there the > > string Samba gets, so by the time Samba tries the process it the @ is > > already interpreted and the string split. > > > > Sorry! > > > > Andrew Bartlett" > > > > Yeah, wondering if

Hey All, Appears I solved this one and NFS mounts now work on all my clients. No issues since fixing it a few hours back. RESOLUTION Auditd is to blame for the trouble. Noticed this in the logs on 2 of the 3 NFS servers (nfs01, nfs02, nfs03): type=AVC msg=audit(1526965320.850:4094): avc: denied { write } for pid=8714 comm="ganesha.nfsd" name="nfs_0" dev="dm-0" ino=201547689 scontext=system_u:system_r:ganesha_t:s0 tcontext=system_u:object_r:krb5_host_rcache_t:s0 tclass=file type=SYSCALL msg=audit(152...

...for 'username map' > > Looking at the attached logs however, appears the server is already > getting the split user.? Or am I reading that incorrectly? It looks Windows is sending 'joe at mds.xyz', but your Macbook isn't, it could be sending just 'joe' or 'NFS03\joe' or something else entirely. Rowland

...t;>> Looking at the attached logs however, appears the server is already >>> getting the split user.? Or am I reading that incorrectly? >> It looks Windows is sending 'joe at mds.xyz', but your Macbook isn't, it >> could be sending just 'joe' or 'NFS03\joe' or something else entirely. >> >> Rowland >> >> >> >> >> > > Yep.? It's very persistent at parsing it by / or @ or \ .? Even if I try > "joe at mds.xyz"? I get user '"joe' printed which includes the quote. >...

...#39; >> >> Looking at the attached logs however, appears the server is already >> getting the split user.? Or am I reading that incorrectly? > It looks Windows is sending 'joe at mds.xyz', but your Macbook isn't, it > could be sending just 'joe' or 'NFS03\joe' or something else entirely. > > Rowland > > > > > Yep. It's very persistent at parsing it by / or @ or \ . Even if I try "joe at mds.xyz" I get user '"joe' printed which includes the quote. -- Thx, TK.

...ooking at the attached logs however, appears the server is already >>>> getting the split user.? Or am I reading that incorrectly? >>> It looks Windows is sending 'joe at mds.xyz', but your Macbook isn't, it >>> could be sending just 'joe' or 'NFS03\joe' or something else entirely. >>> >>> Rowland >>> >>> >>> >>> >>> >> >> Yep.? It's very persistent at parsing it by / or @ or \ .? Even if I >> try "joe at mds.xyz"? I get user '"joe'...

On 4/11/2018 11:54 AM, Alex K wrote: Hey Guy's, Returning to this topic, after disabling the the quorum: cluster.quorum-type: none cluster.server-quorum-type: none I've ran into a number of gluster errors (see below). I'm using gluster as the backend for my NFS storage. I have gluster running on two nodes, nfs01 and nfs02. It's mounted on /n on each host. The path /n is