Detlev Habicht via FreeIPA-users wrote:
Thank you, for your answer.
How can i avoid this mixing of packages?
Well, i think i have a mix of 7.2, 7.3 and 7.4 (Scientific Linux). :-(
What can i do to only install 7.2 and the patches for 7.2 (for example)?
I know nothing of SL but there may be separate repositories for each
release that you could use. Otherwise I don't know. The way that RHEL
operates is that each dot release contains package updates as well as
potential security updates so staying at a specific release carries risk
which increases over time.
The thing about NFS is there are a lot of moving parts including NFS
itself, gssproxy, potentially autofs, rpcbind, etc. You should be able
to add a whole slew of -vvvv to get additional debug information out of
the various daemons that may point you in the right direction.
rob
Detlev
--
Detlev | Institut fuer Mikroelektronische Systeme
Habicht | D-30167 Hannover +49 511
76219662 habicht(a)ims.uni-hannover.de <mailto:habicht@ims.uni-hannover.de>
--------+-------- Handy +49 172 5415752 ---------------------------
Am 29.08.2017 um 17:20 schrieb Rob Crittenden via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org
<mailto:freeipa-users@lists.fedorahosted.org>>:
> Detlev Habicht via FreeIPA-users wrote:
>> Hello,
>>
>> i have setup an IPA server, NFS server with Samba and of course many
>> clients.
>> The server are running Scientific Linix 7.3, the clients Fedora 25,
>> CentOS 7.3
>> and also SL 7.3.
>>
>> This was running well for one year.
>>
>> Last week - i think when new IPA patches arrived - we where not able to
>> mount
>> the NFS shares. I see messages like this:
>>
>> Could not chdir to home directory /home/habicht: No such file or
>> directory
>>
>> When i make a "ls /home“ i see the directories, but i can’t mount.
>>
>> Authentication is working.
>>
>> First i thought, my IPA server is broken, so i setup a new one and i
>> also
>> configure the NFS server and the clients for the new IPA server.
>> (Important: On the NFS server i do only a new ipa-client-install - not a
>> reinstall
>> of the whole server!)
>>
>> But i then have the same problem again …
>>
>> For the shares i am using sec=krb5i. At the end i tested sec=sys. And
>> this works!
>>
>> Can you give me any help, why a NFS server suddenly stopped working
>> exporting
>> the shares with sec=krb5i (and also krb5 …)?
>> What could be broken?
>> Where i have to search?
>>
>> Thanx for any help!
>
> I don't know what the issue is but it is highly unlikely to be related
> to the IPA packages, especially for a pre-configured system.
>
> I'd look to see what else was pulled in with the update.
>
> Note too that mixing packages between releases (7.3 and 7.4 in this
> case) is not well-tested so you should avoid it when possible.
>
> rob
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> <mailto:freeipa-users@lists.fedorahosted.org>
> To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org
> <mailto:freeipa-users-leave@lists.fedorahosted.org>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org