Need help with NFS

Server: SuSE 8.1 on a Dec Alpha
Client: Gentoo on x86

************************************* Server configuration:

DECAlpha* ~ # ifconfig -a

eth0***** Link encap:Ethernet* HWaddr 00:A0:CC:64:B3:02
********* inet addr:192.168.0.1* Bcast:192.168.0.7* Mask:255.255.255.248
********* inet6 addr: fe80::2a0:ccff:fe64:b302/10 Scope:Link
********* UP BROADCAST RUNNING MULTICAST* MTU:1500* Metric:1
********* RX packets:416 errors:0 dropped:0 overruns:0 frame:0
********* TX packets:4 errors:0 dropped:0 overruns:0 carrier:0
********* collisions:0 txqueuelen:100
********* RX bytes:24960 (24.3 Kb)* TX bytes:288 (288.0 b)
********* Interrupt:25 Base address:0x8000

eth1***** Link encap:Ethernet* HWaddr 00:A0:CC:E4:81:57
********* inet addr:10.10.32.3* Bcast:10.10.32.15* Mask:255.255.255.240
********* inet6 addr: fe80::2a0:ccff:fee4:8157/10 Scope:Link
********* UP BROADCAST NOTRAILERS RUNNING MULTICAST* MTU:1500* Metric:1
********* RX packets:10111 errors:0 dropped:0 overruns:0 frame:0
********* TX packets:269 errors:1 dropped:0 overruns:0 carrier:2
********* collisions:0 txqueuelen:100
********* RX bytes:1644619 (1.5 Mb)* TX bytes:38660 (37.7 Kb)
********* Interrupt:27 Base address:0x8400


*21:31:43 15/07/2003 root DECAlpha* ~ # cat /var/lib/nfs/xtab

/cap*** thunder.powermoneysex.lan(rw,async,wdelay,nohide,
insecure,no_root_squash,no_all_squash,no_subtree_c heck,
insecure_locks,mapping=identity,anonuid=-2,anongid=-2)

*21:33:54 15/07/2003 root DECAlpha* ~ # rpcinfo -p
** program vers proto** port
*** 100000*** 2** tcp*** 111* portmapper
*** 100000*** 2** udp*** 111* portmapper
*** 100024*** 1** udp* 32768* status
*** 100024*** 1** tcp* 32768* status
*** 100003*** 2** udp** 2049* nfs
*** 100003*** 3** udp** 2049* nfs
*** 100021*** 1** udp* 32770* nlockmgr
*** 100021*** 3** udp* 32770* nlockmgr
*** 100021*** 4** udp* 32770* nlockmgr
*** 100005*** 1** udp* 32771* mountd
*** 100005*** 1** tcp* 32769* mountd
*** 100005*** 2** udp* 32771* mountd
*** 100005*** 2** tcp* 32769* mountd
*** 100005*** 3** udp* 32771* mountd
*** 100005*** 3** tcp* 32769* mountd




DECAlpha* ~ # cat /etc/exports

# See the exports(5) manpage for a description of the syntax of this file.
# This file contains a list of all directories that are to be exported to
# other computers via NFS (Network File System). # This file used by
rpc.nfsd and rpc.mountd. See their manpages for details # on how make
changes in this file effective

/cap** 10.10.32.5(rw,no_root_squash,async)

DECAlpha* ~ # cat /etc/hosts.allow

# /etc/hosts.allow
# See `man tcpd´ and `man 5 hosts_access´ for a detailed description #
of /etc/hosts.allow and /etc/hosts.deny. #

http-rman : ALL
portmap : ALL
lockd : ALL
mountd : ALL
rquotad : ALL
statd : ALL

DECAlpha* ~ # cat /etc/hosts.deny
no such file

DECAlpha* ~ # cat /proc/fs/nfs/exports *
# Version 1.1
# Path Client(Flags) # IPs
/cap*** thunder.powermoneysex.lan(rw,no_root_squash,async, wdelay) # 10.10.32.5

DECAlpha* ~ # cat /var/lib/nfs/xtab

/cap*** thunder.powermoneysex.lan(rw,async,wdelay,nohide,i nsecure,
no_root_squash,no_all_squash,no_subtree_check,
insecure_locks,mapping=identity,anonuid=-2,anongid=-2)

DECAlpha* ~ #* ls /cap -ls

total 40
** 4 drwxr-xr-x*** 4 root**** root******** 4096 Jul 15 00:52 .
** 4 drwxr-xr-x** 20 root**** root******** 4096 Jul 14 18:35 ..
* 16 drwx------*** 2 root**** root******* 16384 Jul 14 17:41 lost+found
* 12 -rw-r--r--*** 1 root**** root******** 9369 Jul 15 00:15 message.txt
** 4 drwxr-xr-x*** 2 root**** root******** 4096 Jul 15 00:52 text

DECAlpha* ~ # exportfs -ra


DECAlpha* ~ # showmount -e 10.10.32.3
Export list for 10.10.32.3:


************************************************** ******* Client
configuration:

root /home/reaper 22:34:34 #ifconfig -a

eth0 Link encap:Ethernet HWaddr 00:A0:CC7:26:AB
inet addr:10.10.32.5 Bcast:10.10.32.15 Mask:255.255.255.240 UP
BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500 Metric:1 RX
packets:21260 errors:1 dropped:0 overruns:0 frame:0 TX
packets:14674 errors:1 dropped:0 overruns:0 carrier:1
collisions:0 txqueuelen:100
RX bytes:3184170 (3.0 Mb) TX bytes:1009586 (985.9 Kb)
Interrupt:18 Base address:0xb000


root /home/reaper 22:34:39 #
root /home/reaper 22:58:32 #
root /home/reaper 22:58:32 # mount sniff.powermoneysex.lan:/cap /sniff

mount: sniff.powermoneysex.lan:/cap failed, reason given by server:
Permission denied

root /home/reaper 22:58:36 # mount sniff.powermoneysex.lan:/cap /sniff

mount: sniff.powermoneysex.lan:/cap failed, reason given by server:
Permission denied

root /home/reaper 23:06:05 #showmount -e 10.10.32.3
Export list for 10.10.32.3:

root /home/reaper 23:59:42 #

************************************************** *****

Sorry for the long post but I'm trying to avoid wasting time by having to
post replies in response to requests for additional information.

My guess is that since showmount -e doesn't list anything that the
directory isn't really being exported. That doesn't make sense though
since both /proc/fs/nfs/exports and /var/lib/nfs/xtab seem to indicate it
is.

I've run out of ideas and things to try, I hope somebody more
knowledgeable anbout NFS reads this and is willing to give me some
direction as to how to go about diagnosing this.

TIA

--
Cheers
T.G. Reaper
Linux Thunder 2.4.20-gentoo-r5.smp.acpi #6 SMP Fri Jul 4 2003
Dual 1.0 GHz Pentium III (Coppermine) GenuineIntel GNU/Linux
*************Reaper At Debug1 . com***************************

[crossposting eliminated]

In article <(E-Mail Removed)>,
T.G. Reaper wrote:
> root /home/reaper 22:58:32 # mount sniff.powermoneysex.lan:/cap /sniff
>
> mount: sniff.powermoneysex.lan:/cap failed, reason given by server:
> Permission denied
> [snip]
> Sorry for the long post but I'm trying to avoid wasting time by having to
> post replies in response to requests for additional information.

Well you have to balance that against the possibility that people won't
read it all. I didn't.

And there is one thing you left out: name resolution on the server, i.e.
/etc/hosts. Does the server resolve the name of the client to one of its
approved clients? Having an IP in the network range of powermoneysex.lan
won't do it. Add the IP and FQDN to /etc/hosts on the server (or to a
local DNS server.)
--
/dev/rob0 - preferred_email=i$((28*28+28))@softhome.net
or put "not-spam" or "/dev/rob0" in Subject header to reply

T.G. Reaper wrote:
> DECAlpha ~ # exportfs -ra
>
>
> DECAlpha ~ # showmount -e 10.10.32.3
> Export list for 10.10.32.3:

# exportfs -vra

--
------------------------------------------------------------------
Andrew Schultz | The views expressed might
(E-Mail Removed) | not represent those of NCSU.
http://www4.ncsu.edu/~ajschult/ | They are however, correct.

On Thu, 17 Jul 2003 08:48:51 -0700, /dev/rob0 <(E-Mail Removed)> wrote:


>> mount: sniff.powermoneysex.lan:/cap failed, reason given by server:
>> Permission denied
>> [snip]
>> Sorry for the long post but I'm trying to avoid wasting time by having to
>> post replies in response to requests for additional information.
>
>Well you have to balance that against the possibility that people won't
>read it all. I didn't.

Maybe if you had read it all you would have noticed that the server
resolved the client name listing it in /proc/fs/nfs/exports. The
/etc/exports file only listed the IP address.

>And there is one thing you left out: name resolution on the server, i.e.
>/etc/hosts. Does the server resolve the name of the client to one of its
>approved clients?

Yes, I can ping client->server and server->client by name.

> Having an IP in the network range of powermoneysex.lan
>won't do it. Add the IP and FQDN to /etc/hosts on the server (or to a
>local DNS server.)

Both are listed in forward and reverse zones of the DNS server for the
local LAN.

Any other ideas?

--
Cheers
T.G. Reaper

On Thu, 17 Jul 2003 12:18:03 -0700, /dev/rob0 wrote:

> In article <(E-Mail Removed)>,
> T.G Reaper wrote:
>> Any other ideas?
>
> Nope, sorry. That's the problem that I've tripped upon in my Slackware-
> to-Slackware NFS'ing.

Just to let you know, you were correct, it was a DNS issue. I was wrong in
stating that the DNS server had the client in both forward and reverse
lookup zones. In fact the client was listed only in the reverse lookup
zone, that's why the server was able to resolve it's name from an IP address.

Once I added the client to the forward zone everything began
working as expected.

Thanks.

--
Cheers
T.G. Reaper
Linux Thunder 2.4.20-gentoo-r5.smp.acpi #6 SMP Fri Jul 4 2003
Dual 1.0 GHz Pentium III (Coppermine) GenuineIntel GNU/Linux
*************Reaper At Debug1 . com***************************