similar to: nfs4 mounted homedir and kerberos tickets

Hai..   I need to have my home dirs shared over some of my servers. I did setup a nfs4 kerberos base Debian jessie, samba 4.1.17 and sernet samba 4.1.3 on these servers.   This works, i can mount without problems.   But because verything is created with the windows user tools, the owner/Group is root. Like this   Server:   ls -al drwxrwx---+  2 root  root 4096 Sep  4 13:17

Hi everyone, I'm sorry if this has already been covered somewhere, but I've had a look and can't find it. Also if there is a better place for this question, please let me know. I know that the CTDB documentation states that only NFS2/3 are supported with CTDB but what I'd really like to know is why NFS4 won't work and if NFS4 support is planned for the future (timeline?).

All test machines are CentOS 5.5 (RHEL subscriptions purchased). We've had NFS3 storage working fine and decided to try NFS4. We can mount an NFS4 share on our KVM host, but the SELinux file context on the mountpoint directory is magically changed from virt_image_t to nfs_t. Restorecon refuses to change it back. Adding the mount option context=system_u:object_r:virt_image_t on either server

Hi everyone We're really struggling with nfs4 <--> windows acls. Scenario Samba4 share --> cifs --> win7. No problem Samba4 share --> nfs4 --> Linux. acls not inherited Neither is there inheritance vica versa. e.g. It is not possible to create files with group rw on a umask 0022 nfs4 share. nfs4_setfacl cannot override umask. Using POSIX or windows acls this works

Fedora 13 is using nfs4, and there is a problem in opening files requiring OpenOffice if accessed over an nfs3 mount, so it's time to change. I found a couple of tutorials, and got it *almost* working correctly. This is where I need help. Logwatch tells me /nfs4exports/Data1 and /Data1 have same filehandle for *,192.168.0.0/24,192.168.0.0/255.255.255.0, using first The tutorial I was

HTTPD on some of my CentOS5 systems is configured to run as user "nobody". Also, it needs access to some exported file systems. CentOS5 uses NFS3 so I changed the ownership of the files on the storage server to "nobody" to give httpd full permissions. Now I want to rebuild these systems with CentOS6 and httpd running as user "apache". The problem is how to give

After getting a reasonably configured NFS4 setup working on my Scientific Linux server, I spent a majority of my evening trying to do the same with my Centos 5 box, with fruitless results. Most attempts to mount that server returns the following message: [root at sl01 log]# mount -t nfs4 192.168.15.200:/opt/company_data /mnt mount.nfs4: Operation not permitted As nearest as I can tell, I was

Am 20.03.2015 um 10:45 schrieb Volker Lendecke: > On Thu, Mar 19, 2015 at 05:47:11PM +0100, Robert Schetterer wrote: >>> Well the API is propably just stuffing blobs into extended >>> attributes directly from userspace. That's how most of >>> the NFSv4 ACLs usually get done :-(. >>> >>> Of course all implementations use different blobs containing

> However, I have two objections at first glance: > a) if you remove AD access for an AD user, this user can't mount samba > shares, because he won't get authenticated correctly (on the Samba file > server sharing the homes), no? Looks correct to me what your saying, But how are you removing ad access from an AD user? > b) if you use NFS, and I tried that, and a user

Am 19.03.2015 um 17:39 schrieb Jeremy Allison: > On Thu, Mar 19, 2015 at 10:16:20AM -0400, Kevin Taylor wrote: > >> Unfortunately I'm not a programmer, so I don't know if there is an API or not. As far as me the user can tell is that we have an NFSv4 filesystem mounted on the linux box. We have tools available through the nfs4-acl-tools package (this is on CentOS 6, for

I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where I'm confident in the answer, so I figure I'd just ask again here if that's ok. Here's what we have, and what we'd like to do: Storage is a Netapp (cluster mode CDOT 8.2 I believe), it's NFS exported to our linux system. Linux system is CentOS 6 and can NFS mount the

Hello, I have a CentOS 5.2 server that exports /home on the local network for 2 users by secure nfs4 with kerberos krb5p. The clients are a notebook and a desktop pc. The following error is always reproducible on all clients. If running the clients on high load, that means for example 5 firefox windows open and connected with www pages from the internet, installing the new qt development

Hi, I'm stuck since one week on how to give access on a kerberized nfs4 share to client-side local account (more precisely www-data account)... My client setup and step-by-step configuration : - Installed OS : XUbuntu 16.04 x64 1. Installing Samba4 from repos 2. Configuring Samba : My client-side smb.conf : [global] netbios name = TEMPOINST workgroup = WKG security =

Hello, I am searching for a solution that I thought should be kind of standard, but until now I was not successful finding anything. Here is the problem: At our site we offer windows and linux, most servers (eg file, samba, web) are linux based. User data is stored on NFS file servers. Windows systems are part of a Windows domain with an ADS domain controller. At the moment the linux samba

Hello, Actually I have some troubels concerning samba (3.0.24) on debian (4.0): I would like to have some samba-shares on a nfs-filesystem. NFS works fine for the Linux clients and the Linux server. The nfs filesystem is mounted from an other server on /home. The next step is to set up samba to have some shares on the nfs Filesystem (/home/$LOGIN, anonymized configuration attached).

I have a system that I'm vetting as a NAS server. It has a 2.0TB XFS filesystem mounted on /storage and I'm doing benchmarks using nfs3, nfs4, and samba. I'm testing via iozone by mounting the filesystem from my "nas client" box and then running iozone on the mounted filesystem. NFS seems pretty fast - ie, several orders of magnitude faster than samba, and I'm

You need for the apache keytab something like Alias /webmail /usr/share/webmail # <Directory /usr/share/ webmail > AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate On KrbMethodK5Passwd Off KrbServiceName HTTP KrbAuthRealms EXAMPLE.COM Krb5KeyTab /etc/httpd/conf/keytab require valid-user </Directory> chmod 400 /etc/httpd/conf/keytab chown

We''re starting to grow our ZFS environment and really need to start standardizing our monitoring procedures. OS tools are great for spot troubleshooting and sar can be used for some trending, but we''d really like to tie this into an SNMP based system that can generate graphs for us (via RRD or other). Whether or not we do this via our standard enterprise monitoring tool or

>>>>> "Mark" == Mark Moseley <moseleymark at gmail.com> writes: Mark> This is just me throwing things out to look at, but did the Mark> client mount on the old server use NFS3 and the new upgraded Mark> client uses NFS4? Sometimes that can cause weirdness with id Mark> mapping.? Another thing to check is selinux, is it enabled? It's one of those

If not done, add the server to the AD. Add the host and nfs to the COMPUTERNAME($) account. And use winbind to refresh the keytab. Stop samba, remove the keytab, create the new with the new SPN's in it, start samba. And Use the second keytab for apache with only http as upn in it. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at