Date: Mon, 13 Oct 2014 08:10:02 +0000 From: "=?utf-8?B?TG/Dr2MgQmxvdA==?=" <loic.blot@unix-experience.fr> To: "Rick Macklem" <rmacklem@uoguelph.ca> Cc: freebsd-fs@freebsd.org Subject: Re: NFSv4 nobody issue Message-ID: <1ffeae65b7b297266ee2d59dc0289d07@mail.unix-experience.fr> In-Reply-To: <8ca92a8e507970c5bc3e34c31c30561e@mail.unix-experience.fr> References: <8ca92a8e507970c5bc3e34c31c30561e@mail.unix-experience.fr> <1738545148.62071361.1412941900737.JavaMail.root@uoguelph.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi,=0Ai tryed some other things=0A=0AUser nobody (65534)=0A-> chown nobod= y /usr/jail/test.file =3D> problem=0A=0AGroup nogroup (65533)=0A-> chown = :nogroup /usr/jail/test.file =3D> same problem=0A=0AGroup nobody (65534)= =0A-> chown :nobody /usr/jail/test.file =3D> no problem=0A=0AChange user = nobody UID from 65534 to 65533 =3D> same problem. It's not a UID number p= roblem but a name problem.=0A=0AThen, user nobody and group nogroup (not = the integer values) are problematic. I looked at nfsuserd.c and i see:=0A= u_char *defaultuser =3D "nobody";=0Au_char *defaultgroup =3D "nogroup";= =0A=0AI think it's related.=0A=0ARegards,=0A=0ALo=C3=AFc Blot,=0AUNIX Sys= tems, Network and Security Engineer=0Ahttp://www.unix-experience.fr=0A=0A= 13 octobre 2014 09:15 "Lo=C3=AFc Blot" <loic.blot@unix-experience.fr> a = =C3=A9crit: =0A> Hi,=0A> of course i have it. On each node:=0A> =0A> # ca= t /etc/master.passwd | grep nobody=0A> returns:=0A> nobody:*:65534:65534:= :0:0:Unprivileged user:/nonexistent:/usr/sbin/nologin=0A> =0A> It's why i= do a report here :)=0A> =0A> Regards,=0A> =0A> Lo=C3=AFc Blot,=0A> UNIX = Systems, Network and Security Engineer=0A> http://www.unix-experience.fr= =0A> =0A> 10 octobre 2014 13:51 "Rick Macklem" <rmacklem@uoguelph.ca> a = =C3=A9crit:=0A> =0A>> Loic Blot wrote:=0A>> =0A>>> Hello @freebsd-fs,=0A>= >> i'm trying to do jail hosting over NFSv4 with ezjail and i'm=0A>>> exp= erimenting an issue that i can't resolve. When i extract=0A>>> base.txz (= with ezjail) or i set nobody user on a file, i have this=0A>>> error:=0A>= >> =0A>>> chown nobody:nobody /usr/jails/fulljail/mnt/=0A>>> No name and/= or group mapping for uid,gid:(65534,65534)=0A>>> chown: /usr/jails/fullja= il/mnt/: Operation not permitted=0A>>> =0A>>> No problem if i set:=0A>>> = chown mysql:nobody /usr/jails/fulljail/mnt/=0A>>> =0A>>> Problem appears = on all files.=0A>> =0A>> Do you have a user by the name of "nobody" in yo= ur password database?=0A>> (NFSv4 uses names and not numbers on the wire,= so no name-->no mapping=0A>> and chown can't be done.)=0A>> =0A>> rick= =0A>> =0A>>> On my ZFS+NFSv4 server i do a dataset, exported in NFS=0A>>>= =0A>>> /etc/exports:=0A>>> V4: /=0A>>> =0A>>> zfs get sharenfs pool/jail= s:=0A>>> -network=3D10.99.99.0 -mask=3D255.255.255.0 -maproot=3Droot=0A>>= > =0A>>> nfsuserd and nfsv4_server_enable=3DYES on both client and server= , plus=0A>>> nfsbcd on client.=0A>>> =0A>>> On the client here is the fst= ab entry=0A>>> 10.99.99.99:/pool/jails /usr/jails nfs rw,nfsv4 0 0=0A>>> = =0A>>> What i'm doing wrong ?=0A>>> =0A>>> Thanks in advance=0A>>> Regard= s,=0A>>> =0A>>> Lo=C3=AFc Blot,=0A>>> UNIX Systems, Network and Security = Engineer=0A>>> http://www.unix-experience.fr =0A>>> _____________________= __________=0A>>> =0A>>> freebsd-fs@freebsd.org mailing list=0A>>> http://= lists.freebsd.org/mailman/listinfo/freebsd-fs=0A>>> To unsubscribe, send = any mail to "freebsd-fs-unsubscribe@freebsd.org"=0A> =0A> _______________= ________________=0A> =0A> freebsd-fs@freebsd.org mailing list=0A> http://= lists.freebsd.org/mailman/listinfo/freebsd-fs=0A> To unsubscribe, send an= y mail to "freebsd-fs-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1ffeae65b7b297266ee2d59dc0289d07>