Feels like I am very close to having integrated our two domains but one thing remains ...
I have a NFSv4(sec=krb5i,sec=krb5) server in realm TRANSMODE.SE and a NFS client in INFINERA.COM realm and automounts the NFS share in the client.
This all works, I get access in the client and kan access files but all files are listed with user=nobody, group=nobody: ls -l total 48 drwxrws--- 2 nobody nobody 104 Aug 17 15:34 ./ drwxrws--- 15 nobody nobody 4096 Aug 17 16:16 ../ -rwxrwx--- 1 nobody nobody 7 Aug 17 15:34 dasdsad.txt* -rwxrwx--- 1 nobody nobody 6180 Aug 17 15:34 New Microsoft Excel Worksheet.xlsx* -rwxrwx--- 1 nobody nobody 11292 Aug 17 15:34 New Microsoft Word Document.docx*
Any idea how I can get the correct user/group IDs listed ?
Jocke
How did you configure ID mapper?
-----Original Message----- From: Joakim Tjernlund [mailto:Joakim.Tjernlund@infinera.com] Sent: 17 August 2016 15:31 To: sssd-users@lists.fedorahosted.org Subject: [SSSD-users] Mounting NFS over cross domains
Feels like I am very close to having integrated our two domains but one thing remains ...
I have a NFSv4(sec=krb5i,sec=krb5) server in realm TRANSMODE.SE and a NFS client in INFINERA.COM realm and automounts the NFS share in the client.
This all works, I get access in the client and kan access files but all files are listed with user=nobody, group=nobody: ls -l total 48 drwxrws--- 2 nobody nobody 104 Aug 17 15:34 ./ drwxrws--- 15 nobody nobody 4096 Aug 17 16:16 ../ -rwxrwx--- 1 nobody nobody 7 Aug 17 15:34 dasdsad.txt* -rwxrwx--- 1 nobody nobody 6180 Aug 17 15:34 New Microsoft Excel Worksheet.xlsx* -rwxrwx--- 1 nobody nobody 11292 Aug 17 15:34 New Microsoft Word Document.docx*
Any idea how I can get the correct user/group IDs listed ?
Jocke _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
-----
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.
On Wed, 2016-08-17 at 14:33 +0000, Ondrej Valousek wrote:
How did you configure ID mapper?
Om both server and client I only have Local-Realms = TRANSMODE.SE,INFINERA.COM
-----Original Message----- From: Joakim Tjernlund [mailto:Joakim.Tjernlund@infinera.com] Sent: 17 August 2016 15:31 To: sssd-users@lists.fedorahosted.org Subject: [SSSD-users] Mounting NFS over cross domains
Feels like I am very close to having integrated our two domains but one thing remains ...
I have a NFSv4(sec=krb5i,sec=krb5) server in realm TRANSMODE.SE and a NFS client in INFINERA.COM realm and automounts the NFS share in the client.
This all works, I get access in the client and kan access files but all files are listed with user=nobody, group=nobody: ls -l total 48 drwxrws--- 2 nobody nobody 104 Aug 17 15:34 ./ drwxrws--- 15 nobody nobody 4096 Aug 17 16:16 ../ -rwxrwx--- 1 nobody nobody 7 Aug 17 15:34 dasdsad.txt* -rwxrwx--- 1 nobody nobody 6180 Aug 17 15:34 New Microsoft Excel Worksheet.xlsx* -rwxrwx--- 1 nobody nobody 11292 Aug 17 15:34 New Microsoft Word Document.docx*
Any idea how I can get the correct user/group IDs listed ?
Jocke _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18. _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
Turn on verbose mode on the ID mapper and see what it says. Not sure what is the functionality of Local-Realms there, but 'Domain' needs to match on both - client and server.
Ondrej
-----Original Message----- From: Joakim Tjernlund [mailto:Joakim.Tjernlund@infinera.com] Sent: 17 August 2016 15:35 To: sssd-users@lists.fedorahosted.org Subject: [SSSD-users] Re: Mounting NFS over cross domains
On Wed, 2016-08-17 at 14:33 +0000, Ondrej Valousek wrote:
How did you configure ID mapper?
Om both server and client I only have Local-Realms = TRANSMODE.SE,INFINERA.COM
-----Original Message----- From: Joakim Tjernlund [mailto:Joakim.Tjernlund@infinera.com] Sent: 17 August 2016 15:31 To: sssd-users@lists.fedorahosted.org Subject: [SSSD-users] Mounting NFS over cross domains
Feels like I am very close to having integrated our two domains but one thing remains ...
I have a NFSv4(sec=krb5i,sec=krb5) server in realm TRANSMODE.SE and a NFS client in INFINERA.COM realm and automounts the NFS share in the client.
This all works, I get access in the client and kan access files but all files are listed with user=nobody, group=nobody: ls -l total 48 drwxrws--- 2 nobody nobody 104 Aug 17 15:34 ./ drwxrws--- 15 nobody nobody 4096 Aug 17 16:16 ../ -rwxrwx--- 1 nobody nobody 7 Aug 17 15:34 dasdsad.txt* -rwxrwx--- 1 nobody nobody 6180 Aug 17 15:34 New Microsoft Excel Worksheet.xlsx* -rwxrwx--- 1 nobody nobody 11292 Aug 17 15:34 New Microsoft Word Document.docx*
Any idea how I can get the correct user/group IDs listed ?
Jocke _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahost ed.org
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18. _______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahost ed.org
_______________________________________________ sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org
-----
The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications@s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.
On Wed, 2016-08-17 at 15:11 +0000, Ondrej Valousek wrote:
Turn on verbose mode on the ID mapper and see what it says. Not sure what is the functionality of Local-Realms there, but 'Domain' needs to match on both - client and server.
Where does idmapd matter(most), server or client? The server is somewhat old and not that easy to upgrade/debug so I hope debugging the client will do?
On Wed, 2016-08-17 at 19:26 +0200, Joakim Tjernlund wrote:
On Wed, 2016-08-17 at 15:11 +0000, Ondrej Valousek wrote:
Turn on verbose mode on the ID mapper and see what it says. Not sure what is the functionality of Local-Realms there, but 'Domain' needs to match on both - client and server.
Where does idmapd matter(most), server or client? The server is somewhat old and not that easy to upgrade/debug so I hope debugging the client will do?
After upgrading libnfsidmap, noticing a parsing bug( X = Y must be X=Y, no spaces in assignments, in idmapd.conf) and rebooting the client it now works :)
Jocke
sssd-users@lists.fedorahosted.org