[Bug 626515] New: NFS4 Domain is localdomain in idmapd.conf for NIS clients with automounter
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c0 Summary: NFS4 Domain is localdomain in idmapd.conf for NIS clients with automounter Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86 OS/Version: openSUSE 11.3 Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: lnxgnome@gmail.com QAContact: jsrain@novell.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.6) Gecko/20100626 SUSE/3.6.6-1.2 Firefox/3.6.6 openSUSE 11.3 (i586) VERSION = 11.3 Scenario: Workstation is configured as NIS Client + Automounter. There are not any nfs entries in /etc/fstab Problem: idmapd Domain is "localdomain", which is incorrect and results in owner UID/GID of all automounted files to be 'nobody'. /etc/idmapd.conf [General] Verbosity = 0 Pipefs-Directory = /var/lib/nfs/rpc_pipefs Domain = localdomain The NIS domain name is provided during NIS Client configuration in YaST, but this might be different from the NFS4 Domain parameter for idmapd. Workaround: Manually update /etc/idmapd.conf with the correct NFS4 Domain name. Reproducible: Didn't try Steps to Reproduce: 1. Inital Install of openSuSE 11.3 Final 2. Configure NIS+Automounter in YaST Actual Results: Domain = localdomain Owner UID/GID of all automounted files to be 'nobody'. Expected Results: Expected result: YaST prompts and configures NFS4 Domain in /etc/imapd.conf to appropriate value. The normal environment will contain additional servers, which include a working NIS Server with maps for automounter (auto.home), and a NFS server to serve the /home mount points specified in the NIS maps. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c yang xiaoyu <xyyang@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |xyyang@novell.com AssignedTo|bnc-team-screening@forge.pr |yast2-maintainers@suse.de |ovo.novell.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c1 Jiří Suchomel <jsuchome@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |jsuchome@novell.com InfoProvider| |lnxgnome@gmail.com --- Comment #1 from Jiří Suchomel <jsuchome@novell.com> 2010-07-29 07:18:33 UTC --- So, do you think that YaST NIS client should offer to save Domain value of /etc/idmapd.conf as the configured NIS domain? Probably only when automounter option is checked? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c2 Jiří Suchomel <jsuchome@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kukuk@novell.com --- Comment #2 from Jiří Suchomel <jsuchome@novell.com> 2010-07-30 07:27:57 UTC --- Thorsten, does the above solution make sense? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c3 --- Comment #3 from Keith Hopkins <lnxgnome@gmail.com> 2010-07-31 04:26:50 UTC --- (In reply to comment #1)
So, do you think that YaST NIS client should offer to save Domain value of /etc/idmapd.conf as the configured NIS domain? Probably only when automounter option is checked?
Definitely only when the automounter option is checked. The value is also set on the YaST / NFS Client Configuration / NFS Settings tab. I do not know if it is possible to connect these or chain them together. If you can open this same NFS tab from the NIS Client screen after the Automounter option is checked, that would proably make a good re-use of existing code. Otherwise, duplicating the Enable NFS4 & NFS4 Domain options below the Automounter checkbox is also acceptable, and gives it needed visibility. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c Keith Hopkins <lnxgnome@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|lnxgnome@gmail.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c4 --- Comment #4 from Keith Hopkins <lnxgnome@gmail.com> 2010-07-31 04:44:42 UTC --- Please also reference the Enhancement request in Bug 626516 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c5 Jiří Suchomel <jsuchome@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |kukuk@novell.com --- Comment #5 from Jiří Suchomel <jsuchome@novell.com> 2010-08-02 07:03:19 UTC --- (In reply to comment #3)
If you can open this same NFS tab from the NIS Client screen after the Automounter option is checked, that would proably make a good re-use of existing code.
Probably not exactly this. But I could add a button "Run NFS client" there.
Otherwise, duplicating the Enable NFS4 & NFS4 Domain options below the Automounter checkbox is also acceptable, and gives it needed visibility.
Yes, that's what I meant. Thorsten, what do you think? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c6 Thorsten Kukuk <kukuk@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|kukuk@novell.com | --- Comment #6 from Thorsten Kukuk <kukuk@novell.com> 2010-08-02 10:31:41 UTC --- I don't understand the problem. According to the idmapd configuration, "Domain" should be by default the FQDN of the host for NFSv4, while the NIS domain should never be the FQDN. If ipmapd "domain" is identical to NIS domainname, why does idmapd not use the getdomainname() syscall but needs the config option? Or is the problem, that we have a wrong default entry in idmapd.conf? Then this should be fixed. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c7 --- Comment #7 from Keith Hopkins <lnxgnome@gmail.com> 2010-08-02 13:29:12 UTC --- (In reply to comment #6)
I don't understand the problem.
According to the idmapd configuration, "Domain" should be by default the FQDN of the host for NFSv4, while the NIS domain should never be the FQDN.
If ipmapd "domain" is identical to NIS domainname, why does idmapd not use the getdomainname() syscall but needs the config option? Or is the problem, that we have a wrong default entry in idmapd.conf? Then this should be fixed.
The problem is that the default 'Domain' set in idmapd.conf is not appropriate for the environment. It was "localdomain", instead of the domain part of the FQDN. And (if that actually gets set to something during installation) I'll take a WAG here and say the installation method may have contributed to this problem. I installed this machine via NFS, booting from the Net-Install CD. Also, there is a 'host' entry on the local DHCP server for this machine's MAC address, so it can pick up the following info automagically during the install: FQDN hostname ip address domain-name-servers subnet-mask broadcast-address routers nis-domain nis-servers (and other trivial stuff, but not the NFS4 domain) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c8 Jiří Suchomel <jsuchome@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |nfbrown@novell.com --- Comment #8 from Jiří Suchomel <jsuchome@novell.com> 2010-08-12 13:25:45 UTC --- I'm still not sure if I should add anything to NIS client. It would help your particular problem, but may confuse (most of) other users, that do not need it. Shouldn't you actually have NFS configured? Neil, what do you think? Isn't there a problem with idmapd.conf defaults (comment 6)? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c9 Neil Brown <nfbrown@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW CC| |nfbrown@novell.com InfoProvider|nfbrown@novell.com | --- Comment #9 from Neil Brown <nfbrown@novell.com> 2010-08-16 03:59:17 UTC --- There isn't really any 'right' value for the idmap.conf domain name. All that is required is that the client and server need to have the same name if (and only if) the same user-name on each maps to the same external entity. The value from 'getdomainname' would certainly be a reasonable choice on installations using NIS for password file lookup. The current default of using the DNS domain name is also reasonable in a lot of cases. 'localdomain' is never really reasonable, and idmapd should only use that when nothing else is available - setting it in idmapd.conf certainly seems wrong. I would suggest that by default Yast should not set a domain name in idmapd.conf. However when configuring NIS for username lookup it would be appropriate to have an option "Use NIS domain for NFSv4 username mapping" which should probably default to 'on'. Does that help? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c10 Jiří Suchomel <jsuchome@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |nfbrown@novell.com --- Comment #10 from Jiří Suchomel <jsuchome@novell.com> 2010-08-17 08:33:49 UTC --- (In reply to comment #9)
I would suggest that by default Yast should not set a domain name in idmapd.conf. However when configuring NIS for username lookup it would be appropriate to have an option "Use NIS domain for NFSv4 username mapping" which should probably default to 'on'.
It probably makes sense from the point of NFS configuration (to offer NIS domain, if available), but I'm not sure if I should add the "Use Domain for NFSv4 username mapping" checkbox into the NIS configurator... (wouldn't it scare other users?) Or did you mean rightly this? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c11 --- Comment #11 from Thorsten Kukuk <kukuk@novell.com> 2010-08-17 08:36:10 UTC --- Since it is about NFS configuration, it should go into the yast2 nfs module. People don't expect and will not search for that option in the NIS module. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c13 --- Comment #13 from Keith Hopkins <lnxgnome@gmail.com> 2010-08-17 08:59:22 UTC --- (In reply to comment #11)
Since it is about NFS configuration, it should go into the yast2 nfs module. People don't expect and will not search for that option in the NIS module.
NFS4 Domain configuration is already in the NFS Module. Enabling NIS+automounter is not aware of it, because it happens in the NIS module. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c14 --- Comment #14 from Keith Hopkins <lnxgnome@gmail.com> 2010-08-17 15:04:05 UTC --- (In reply to comment #9)
I would suggest that by default Yast should not set a domain name in idmapd.conf. However when configuring NIS for username lookup it would be appropriate to have an option "Use NIS domain for NFSv4 username mapping" which should probably default to 'on'.
I'd have to disagree with using the NIS domain as the default. Other *nix implementation use the DNS domain in preference to the NIS domain. -- I did a bit poking around and came up with the following info: There are/were two proposals for using DNS records for finding the NFS4 Domain, one used the RR: NFS4ID. The other used the TXT record _nfsv4idmapdomain. HP-UX uses a (Sun based) nfsmapid which uses _nfsv4idmapdomain DNS text record as "first choice". Solaris should be implementing it too, but in what release, I don't know. Solaris uses the DNS domain by default, then the NIS domain. (I'm not sure if this is dynamic, or set during installation) Both HP-UX and Solaris fall back to a manual setting in a config file. AIX seems to use just a config file, and custom command (chnfsdom) for updating it. The CentOS/RHEL 5 (BSD) man page says "By default, domain is set to be the FQDN of the host, minus the hostname." (assuming it's not set in idmapd.conf) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c15 --- Comment #15 from Jiří Suchomel <jsuchome@novell.com> 2010-08-18 11:25:53 UTC --- (In reply to comment #14)
I'd have to disagree with using the NIS domain as the default. Other *nix implementation use the DNS domain in preference to the NIS domain.
-- I did a bit poking around and came up with the following info:
There are/were two proposals for using DNS records for finding the NFS4 Domain, ...
But who should actually do that? NFS client configurator (YaST)? Or some daemon? The question presented here is, if NIS client configurator (YaST) should offer an option to adapt /etc/imapd.conf's domain value to the current value of NIS domain. So this would not be a default behavior, just a possibility. However, the problem is, if it does not mean adding extra complexity to NIS client module and if it weren't better to advice users to use NFS client module directly. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c16 --- Comment #16 from Keith Hopkins <lnxgnome@gmail.com> 2010-08-31 07:05:51 UTC --- (In reply to comment #15)
(In reply to comment #14)
I'd have to disagree with using the NIS domain as the default. Other *nix implementation use the DNS domain in preference to the NIS domain.
But who should actually do that? NFS client configurator (YaST)? Or some daemon?
assuming "some daemon" == rpc.idmapd Then the answer is 'both', and is the way things are currently implemented. idmapd has to have some value for the domain, and that is defined in the RFCs mentioned, and already implemented. Alternately, the domain is specified in a configuration, which overrides the idmapd defaults. The YaST's NFS client module can handle the manual configuration.
The question presented here is, if NIS client configurator (YaST) should offer an option to adapt /etc/imapd.conf's domain value to the current value of NIS domain. So this would not be a default behavior, just a possibility.
No, that's not quite the question presented here. It should not be the NIS domain name. The correct question here is, can/should YaST's NIS client module offer an option to configure the NFSv4 domain value (stored in /etc/imapd.conf)? A second question may be, what (if any) default value should be supplied? Hint: leave it unset, and idmapd will fall back to the FQDN of the host, minus the hostname. A third question (and possibly a separate bug) is how/where did /etc/imapd.conf get the invalid setting of "localdomain" from?
However, the problem is, if it does not mean adding extra complexity to NIS client module and if it weren't better to advice users to use NFS client module directly.
Of course, any new added code to YaST's NIS client module will add some complexity (coding, maintenance, QA, testing, etc), and that is just a fact of life. The simple alternative is just adding a text message to advise the users to go to the NFS client module and configure the NFSv4 domain name there. That would be an acceptable option IF the resources are not there to do anything better. But, isn't the whole point of YaST to make administration of the system simpler and more "user friendly"? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c17 --- Comment #17 from Jiří Suchomel <jsuchome@novell.com> 2010-08-31 09:06:41 UTC --- (In reply to comment #16)
The question presented here is, if NIS client configurator (YaST) should offer an option to adapt /etc/imapd.conf's domain value to the current value of NIS domain. So this would not be a default behavior, just a possibility.
No, that's not quite the question presented here. It should not be the NIS domain name.
The correct question here is, can/should YaST's NIS client module offer an option to configure the NFSv4 domain value (stored in /etc/imapd.conf)?
If the value is not related to NIS domain name, than YaST NIS client should not offer its configuration. It can offer a button to start NFS client config, which is a bit more than mentioning it in the help text. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c18 --- Comment #18 from Keith Hopkins <lnxgnome@gmail.com> 2010-08-31 09:18:31 UTC --- (In reply to comment #17)
The correct question here is, can/should YaST's NIS client module offer an option to configure the NFSv4 domain value (stored in /etc/imapd.conf)?
If the value is not related to NIS domain name, than YaST NIS client should not offer its configuration.
By the same logic, should the NIS Client module offer the Automounter checkbox? That checkbox is a convenience, which may or may not be related to NIS (depends on where your maps are stored). And the NFSv4 Domain name may be related to Automounter....
It can offer a button to start NFS client config, which is a bit more than mentioning it in the help text.
That's also a good solution, and probably the most practical one. I'd suggest making it available if the Automounter checkbox is checked. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c19 Jiří Suchomel <jsuchome@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED AssignedTo|mvidner@novell.com |jsuchome@novell.com --- Comment #19 from Jiří Suchomel <jsuchome@novell.com> 2010-08-31 09:34:04 UTC --- (In reply to comment #18)
It can offer a button to start NFS client config, which is a bit more than mentioning it in the help text.
That's also a good solution, and probably the most practical one. I'd suggest making it available if the Automounter checkbox is checked.
OK, I'll take care of this one. Regarding other problems, not related to YaST NIS, please open separate reports. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c20 --- Comment #20 from Jiří Suchomel <jsuchome@novell.com> 2010-09-17 13:42:53 UTC --- Created an attachment (id=390236) --> (http://bugzilla.novell.com/attachment.cgi?id=390236) screenshot of the proposal Sorry, I had other work to do. What would you think about this? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c21 --- Comment #21 from Keith Hopkins <lnxgnome@gmail.com> 2010-09-18 13:13:15 UTC --- (In reply to comment #20)
What would you think about this?
The button placement is ok. The text in Help reads like there is a "automounter configuration" option in the NFS Client. I'd recommend instead saying "NFS Settings which affects how the automouter operates can be set in NFS Client, ...." Can the button automagically directly open the "NFS Settings" tab of the NFS Client? That would be better than taking the user to the "NFS Shares" tab. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=626515 https://bugzilla.novell.com/show_bug.cgi?id=626515#c22 Jiří Suchomel <jsuchome@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #22 from Jiří Suchomel <jsuchome@novell.com> 2010-09-20 20:04:32 UTC --- (In reply to comment #21)
(In reply to comment #20)
What would you think about this?
The button placement is ok.
The text in Help reads like there is a "automounter configuration" option in the NFS Client.
I'd recommend instead saying "NFS Settings which affects how the automouter operates can be set in NFS Client, ...."
I changed it according to your proposal and submitted new package (yast2-nis-client-2.20.0) into Factory.
Can the button automagically directly open the "NFS Settings" tab of the NFS Client? That would be better than taking the user to the "NFS Shares" tab.
Well, theoretically yes, but unfortunately NFS stuff maintainer is too busy with other stuff to care of such minor issue. Sorry, I know it took quite long time, and the change is minimal, but that's caused by our current workload and changed goals.... :-( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=626515 http://bugzilla.novell.com/show_bug.cgi?id=626515#c23 --- Comment #23 from Bernhard Wiedemann <bwiedemann@suse.com> --- This is an autogenerated message for OBS integration: This bug (626515) was mentioned in https://build.opensuse.org/request/show/65008 Factory / yast2-nis-client -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com