similar to: Samba - Kerberos delegation support

just a quick update: no issues with NFSv4.0 (load is slowly growing, currently ~7k mailboxes) instead, bad news from delegation front, we enabled it for a couple of days but we ran in ugly issues: processes went in "uninterruptible sleep" state, load average gets huge, reboot was the only escape :-( -brd Alessio Cecchi wrote: > Il 12/06/2015 13:02, brd ha scritto: > >Alessio

Alessio Cecchi wrote: [...] > Have you already try to run NFSv4? it's in place on a (very) small sample of mailboxes in dbox format, no issues up to now (Debian Wheezy mainline kernel) > When we switch to netapp and nfsv4 we had many problems (lock problems > and instability) and we had to go immediately to NFSv3. I don't know if > was a netapp problem or nfs client (Debian

hi all, i'm managing a large installation of a dovecot cluster in director + NFS backend architecture and we are moving from NFSv3 to NFSv4. Our NFS server is a Netapp in clustered mode and reading technical specs of NFSv4 delegation feature it seems that enabling delegation in this type of dovecot architecture should bring great benefits: only one backend server access a specific mailbox at a

Hi, Just out of curiosity what is in nfsv4 delegation that you think would give a benefit on your configuration? If I read back the thread you seem to have dovecot configured with director ring in front of the backends. In that case Dovecot already manages storage in a way that only one of the backends is accessing each users data at a time. So I can?t see anything but problems form enabling

Hello, I've got a little problem with NFSv4 + Kerberos. I can do a mount with Kerberos with a valid ticket, but read-only. After the mount -vvv -t nfs -o nfsv4,sec=krb5 nfsserver:/ /mount_test/ I can see: #klist: Feb 6 07:22:47 Feb 6 17:22:43 nfs/nfsserver at my.domain #/var/heimdal/kdc.log: 2013-02-06T07:28:26 TGS-REQ clientnfs at my.domain from IPv4:192.168.0.23 for nfs/nfsserver at

Please CC me on replies. Hi. I am trying to compile samba 3.0.0 on a Solaris 2.6 box. I noticed that samba needed MIT Kerberos, so I compiled and installed krb5-1.3.1, I believe, successfully in /usr/local. I now think that may have been a mistake. Trying to compile samba 3.0.0, I get the following: Compiling dynconfig.c In file included from include/includes.h:429, from

On 8/18/2015 10:46 AM, Alessio Cecchi wrote: > Hi, > > in this tipical setup (Dovecot/Director thate share Maildir via NFS) on > your NFS Server you have (about) 90% of read operations and only 10% of > write operations. > > If you see detailed stats for NFS operations you have 40-50% of GETATTR, > this means that NFS/Dovecot clients are caching data (mainly dovecot >

Hi, last day I tried to enable "nfsv4 delegation" on my cluster (enable nfsv4.0 and read delegation on Netapp and remount the volume on Linux Centos 6.7 clients with Dovecot+Director). It was a failure, after some minutes the load on clients was high, and in dovecot.log I found these errors (repeated continuously): Aug 17 20:28:17 pop01eeh dovecot: imap(info at domain.com): Error:

Il 12/06/2015 13:02, brd ha scritto: > Alessio Cecchi wrote: > [...] >> Have you already try to run NFSv4? > it's in place on a (very) small sample of mailboxes in dbox format, no issues > up to now (Debian Wheezy mainline kernel) Good to know, let me know what will be when the load will grow. >> When we switch to netapp and nfsv4 we had many problems (lock problems

Il 11/06/2015 16:03, brd ha scritto: > hi all, > i'm managing a large installation of a dovecot cluster in director + NFS > backend architecture and we are moving from NFSv3 to NFSv4. Our NFS > server is a Netapp Hi, I'm running a similar configuration, expect for the size (medium), with Dovecot/Director and NetApp (but without clustered mode), mailbox are in Maildir

Hi, in this tipical setup (Dovecot/Director thate share Maildir via NFS) on your NFS Server you have (about) 90% of read operations and only 10% of write operations. If you see detailed stats for NFS operations you have 40-50% of GETATTR, this means that NFS/Dovecot clients are caching data (mainly dovecot index files) but they have to revalidate the cache frequently asking to the NFS

FYI, I posted a blog a few days ago about a DTrace provider for NFS that is currently in development: http://blogs.sun.com/roller/page/samf?entry=a_dtrace_provider_for_nfs Let''s discuss any questions, comments, etc. here. I also advertised this on nfs-discuss at opensolaris.org. Naturally, I would expect the discussion here to be more on the specifics of DTrace, and the

Hello, I set up NFSv4 server. To make sure I set vfs.nfsd.server_min_nfsvers=4. I can check its version, for example, by tcpduming and then I can see in wireshark lines like: Network File System Program Version: 4 V4 Procedure: COMPOUND.... .... is there any easier way to check its version? I see there is nfsstat -e option which shows delegs and locks. But all other ones are combined with nfsv3

Patrick Lists wrote: >>> I fail to see how your repository problem is related to my Kickstart PXE/NFS >>> problem. We can install CentOS 6 (no Kickstart) without problems using PXE. >>> It's the NFS-mounting of the Kickstart-file which fails. What I'd love to learn >>> is how others have made NFS/Kickstart work... >> >> Is CentOS 6 assuming

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi, i''m trying to use the nfsv3 provider on S10U6, with the following simple script: #! /usr/sbin/dtrace -s #pragma D option quiet nfsv3:::op-read-start { printf("%s\n", args[1]->noi_curpath); } however, when running it, i get the following error: dtrace: failed to compile script ./nfs2.d: line 5: failed to grab

Thank you for that, i did have a good look at that one. And i use Debian 9, if you test what i posted below in the thread, you will see NFSv4 works fine. Below is missing one more thing, the "allow to delegate (kerberos only) " on the computer object in the AD, should be enabled. And yes, i've see bugchecks also but only on my debian .. Lenny.. Stt.. ;-) .. Its my last lenny

I was used to integrate some linux client in my samba network mounting homes with 'unix extensions = yes', and works as expected, at least with some old lubuntu derivatives. Client side i use 'pam_mount'. Now i'm working on a ubuntu mate derivative, and i've not found a way to start the session properly in CIFS. If i create a plain local home (pam_mkhome), session start as

Hi All, I have setup samba as Active Directory Domain Controller as per the steps mentioned in wiki page https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller I have also setup squid proxy with kerberos auth on other machine as per the steps mentioned on squid wiki page. However I couldn't find any documentation to do a KCD setup. Here are things I

Hello all, I am running v3.4.5 of Samba. Does this version support double hop kerberos authentication? I turned the log level up to 3 and found that it is passing only the hostname. This leads me to believe that the double hop part is not working. I did read that it is supposed to work in Samba4 via http://lists.samba.org/archive/samba-technical/2005-November/043912.html but wasn't sure

Author: wyllys Repository: /hg/zfs-crypto/gate Revision: 72e646444ab691a20b8eca0f34c8add2ed672e7c Log message: 6353492 Regression of 4786126: Kerberos Delegation Credentials not working on S10 and Nevada 6366616 telnet buffers are not big enough to work with some Kerberos tickets 6398068 kerberos gss mechanism does not report out-of-sequence tokens correctly Files: update: