[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Kees Cook
** Changed in: linux (Ubuntu) Milestone: None => maverick-alpha-3 ** Changed in: linux (Ubuntu) Importance: Undecided => Medium ** Summary changed: - Unable to mount NFS shares + Unable to mount NFSv4 shares due to Yama -- Unable to mount NFSv4 shares due to Yama https://bugs.launchpad.

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Ynot
> Thanks again for the report and helping to debug it! no problem glad I could help -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Kees Cook
Okay, I've got this locally reproduced now. Followed https://help.ubuntu.com/community/NFSv4Howto except for the maverick client, which needs idmapd started explicitly after editing /etc/default /nfs-common. Once that'd one, and using server bind mount, I get the same errors. i.e. server filesys

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Kees Cook
Yeah, that's the sticky bit alright. But that NFS mount isn't a symlink, so I think this is a kernel bug regardless. I will try to get this reproduced and a fix tested. I think I know what's wrong, but I'll need to double-check. Thanks for helping me debug this! -- Unable to mount NFS shares

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Ynot
It's been years since I set the NFS up, so I'm a little rusty but re-reading up on it, seems a root owned export dir with sticky bit combined with the root_squash is a security feature disallowing client root from having root priv's on the server setting the top-level export dir as root-owned and

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Ynot
drwxrwxrwt 9 tony tony 4096 2010-06-29 03:58 /nfs4exports I see a 't' at the end of that this the sticky bit? -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubunt

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Kees Cook
And on the server, what does "ls -lda /nfs4exports" show? I think that's the only thing left I haven't checked. NFSv4's namespace semantics are different from older NFS, so I hadn't considered asking about that yet. -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You receiv

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Ynot
** Attachment added: "etc_exports" http://launchpadlibrarian.net/51883323/etc_exports -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list u

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Ynot
Server is Lucid only my desktop is maverick ** Attachment added: "showmount" http://launchpadlibrarian.net/51883320/showmount -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Kees Cook
Is your server running Maverick too? What does "showmount -e tony- server" show from the client? And what are the contents of tony- server's /etc/exports file? -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubu

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Kees Cook
The warning you saw "non-matching-uid symlink following attempted in sticky world-writable directory by mount.nfs4 (fsuid 0 != 1000)" should only happen in the case where a symlink is being following in a directory that is world-writable and sticky ("+t"). None of your directories seem to have tha

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Ynot
What exactly do you mean by "sticky"? drwxr-xr-x 5 root root 4096 2009-10-20 02:18 /home drwxr--r-- 181 tony tony 16384 2010-07-13 12:27 /home/tony drwxr-xr-x 6 root root 4096 2010-06-29 04:01 /media drwxr-xr-x 7 root root 4096 2010-06-29 04:02 /media/raid5 -- Unable to mount NFS shares

[Bug 604407] Re: Unable to mount NFS shares

2010-07-13 Thread Kees Cook
Can you show the output of: ls -lad /home /home/tony /media /media/raid5 Something in these paths must be sticky (when, in theory, it should not be). -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs

[Bug 604407] Re: Unable to mount NFS shares

2010-07-12 Thread Ynot
oops, missed one ls -lad drwxr-xr-x 18 tony tony 4096 2010-05-07 01:53 /home/tony/scripts/ -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 604407] Re: Unable to mount NFS shares

2010-07-12 Thread Ynot
ls -lad done on client share mountpoints (NFS shares mounted) ** Attachment added: "ls-lad" http://launchpadlibrarian.net/51793524/ls-lad -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is s

[Bug 604407] Re: Unable to mount NFS shares

2010-07-12 Thread Ynot
** Attachment added: "fstab" http://launchpadlibrarian.net/51793320/fstab -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@l

[Bug 604407] Re: Unable to mount NFS shares

2010-07-12 Thread Kees Cook
This is a bit strange -- are any of those directories sticky? And where is a symlink involved? Can you attach your client's /etc/fstab and the "ls -lad" output of the destination mount points? ** Changed in: linux (Ubuntu) Assignee: (unassigned) => Kees Cook (kees) ** Changed in: linux (Ub

[Bug 604407] Re: Unable to mount NFS shares

2010-07-12 Thread Ynot
Came across this as well http://lwn.net/Articles/393012/ -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https

[Bug 604407] Re: Unable to mount NFS shares

2010-07-12 Thread Steve Langasek
This is an issue with the Ubuntu kernel then, not with nfs-utils; reassigning. It's also not present in the upstream kernel, so marking that task invalid. ** Package changed: nfs-utils (Ubuntu) => linux (Ubuntu) ** Changed in: linux Status: New => Invalid -- Unable to mount NFS shares h

[Bug 604407] Re: Unable to mount NFS shares

2010-07-12 Thread Ynot
** Also affects: linux Importance: Undecided Status: New -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu

[Bug 604407] Re: Unable to mount NFS shares

2010-07-12 Thread Ynot
Solved by trial & error (this always happens with bugs I file) Linux 2.6.35 changes how symlinks (and presumably bind mounts) work detailed here http://lkml.org/lkml/2010/5/30/144 Solution change owner of my server's /nfs4exports directory from root to the primary user (UID 1000) Bug still stan

[Bug 604407] Re: Unable to mount NFS shares

2010-07-11 Thread Ynot
** Attachment added: "Dependencies.txt" http://launchpadlibrarian.net/51748516/Dependencies.txt -- Unable to mount NFS shares https://bugs.launchpad.net/bugs/604407 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mail