NFS mount failure

[pcorchary]

I need serious guru help I've been doing Unix for 15+ years and Linux now for 3, and I can't figure this out ...

Two boxes, A and B. Box A needs to NFS mount Server B. Box B does NOT have DNS or entry in /etc/hosts (and it won't at this point - it's being built). Box A and B can ping each other no problem and are conencted to a routable IP network.

[tt]
Problem: If A and B are RH7.2, this works
If A is RH8 and B is RH7.2, this works
If A is RH8 and B is RH8, FAILURE
[/tt]

It can be made to work by entering each box in the others /etc/hosts, but this is not a solution ... these "A" boxes are being built, and there are sometimes many of them. This manual edit is time-prohibitive.

On "B", in /etc/exports it doesn't matter (so far) what option you use:[tt]
/share * # fails just the same as....
/share *(insecure,ro) #fails just the same
[/tt]
Anyone have any ideas, please!?

 

[clonny2]

make sure iptables is not running or open up a port.

>---------------------------------------Lawrence Feldman
SR. QA. Engineer SNAP Appliance
lfeldman@snapappliance.com

 

[pcorchary]

OK ... so I'm still having problems with this, and it is somehow tied to Red Hat 8.0!!!

No matter what, I get:
[tt]Sep 4 12:10:35 dco rpc.mountd: refused mount request from 192.168.164.129 (unassigned.corp.xxxxx.com) for /spare (/spare): no DNS forward lookup[/tt]. As soon as I add the client IP to DNS or to /etc/hosts on the server, it works fine. I'm REALLY stumped!!! Please help!


Some posts I've seen in various places on the 'net say that forward-reverse DNS is REQUIRED for NFS, BUT:
1) I have several NAS devices with embedded OS that don't require reverse DNS for clients to connect
2) my Mandrake 8.1 server ( nfs-utils-0.3.1-7mdk) does NOT require reverse DNS for client NFS connects
3) my Red Hat 7.2 server does NOT require reverse DNS for client NFS connects
4) my red Hat 8.0 server DOES require DNS for client NFS connects.

AND, I have made SURE that that hosts.allow is OK in case wrappers are working (and i've seen some reference to the "new secure" version of portmapper using it too).

[tt][root@dco root]$ more /etc/hosts.allow
#
# hosts.allow This file describes the names of the hosts which are
# allowed to use the local INET services, as decided
# by the '/usr/sbin/tcpd' server.
#
ALL : 192.168.[/tt]

And I've made sure that there are no iptables rules:

[tt][root@dco root]# iptables --list
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination[/tt]

 

[fluid11]

RH90 is the same way. I'm not sure if there is a way to turn it off, but if you did turn it off, it would remove some of the flexibility of the /etc/exports file. You wouldn't be able to specify a domain or a hostname that is allowed access to a share. If you do the following in /etc/exports...

/var/nfs *.example.org(ro,sync,root_squash)

...how would the server know if a connecting client is part of the example.org domain if reverse lookups weren't working?

I don't know of any way to turn it off, but there could be.


ChrisP
RHCE, LPIC-1, CCNA, CNE, MCSE, +10 others

 

[pcorchary]

/etc/export resource filtering works just find on RH7.2 and Mandrake 8.1. What I'm having a problem with is NOT a function of that layer of NFS, because even doing:

/share 192.168.*(insecure,rw) or
/share *.XXXXX.com(insecure,rw)

doesn't fix it ... there's something enforcing the reverse DNS lookup and I can't figure out what the heck it is!

philc
LPIC-I/II, Solaris SSA-I/II, CCNA2.0,
Certified WinBlows Rebooter

 

[fluid11]

yeah, I know, I've noticed that it does reverse lookups regardless if your using IP addresses or hostnames. I wish I could tell you how to fix it, but I dont' know. Maybe someone else can help.

This is completely off topic here, but I've been wondering how tough those LPIC-2 exams are? I was thinking of taking them. I can ask this in the UNIX certification forum if you prefer. Congrats on attaining the highly sought after Winblows Rebooter cert


ChrisP
RHCE, LPIC-1, CCNA, CNE, MCSE, +10 others