[Bug 1819197] Re: nss_getpwnam: name 'userX at xx.xx.edu@XX.XX.EDU' domain 'XX.XX.EDU': resulting localname '(null)'

Michael 1819197 at bugs.launchpad.net
Thu Mar 14 15:16:29 UTC 2019


Looks like this commit your looking for is rather old since it doesn't show
up for me in the following file on that repo:
http://git.linux-nfs.org/?p=steved/nfs-utils.git;a=history;f=support/nfsidmap/nss.c

Perhaps Steve Dickson can tell us where he forked the repository from
previously and if it still exists?

*Michael Allen Barkdoll*
Computer Systems Architecture Specialist
Email: mbarkdoll at cs.siu.edu | Phone: 618-453-6051
****************************************************************************************************
Department of Computer Science, Southern Illinois University of Carbondale
Engineering A0311C, Mail Code 4511, 1230 Lincoln Drive, Carbondale, IL 62901
Main Office: 618-536-2327 | Fax: 618-453-6044 | Lab Assistants: 618-453-6052
****************************************************************************************************


On Thu, Mar 14, 2019 at 9:39 AM Michael Barkdoll <mbarkdoll at cs.siu.edu>
wrote:

> Hi Andreas,
>
> I think the repo might be here:
> http://git.linux-nfs.org/?p=steved/nfs-utils.git;a=summary
>
> Source:
> http://www.citi.umich.edu/projects/nfsv4/linux/
> Links to: "Any recent distribution should include kernels and userspace
> utilities with NFSv4 and rpcsec_gss support, and development versions can
> generally be found at linux-nfs.org."
> http://linux-nfs.org/wiki/index.php/Main_Page
> Links to:
> nfs-utils code repository:
> http://git.linux-nfs.org/?p=steved/nfs-utils.git;a=summary
>
> The snapshots have the nss.c code that you've found that appears to be the
> bug.  I'm guessing this is the original source of the code.  I can try to
> help as well just let me know what I'd need to do, thanks.
> Michael Barkdoll
>
>

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to nfs-utils in Ubuntu.
https://bugs.launchpad.net/bugs/1819197

Title:
  nss_getpwnam: name 'userX at xx.xx.edu@XX.XX.EDU' domain 'XX.XX.EDU':
  resulting localname '(null)'

Status in libnfsidmap package in Ubuntu:
  New
Status in nfs-utils package in Ubuntu:
  New
Status in libnfsidmap package in Debian:
  Unknown

Bug description:
  uid and gid appear to not map properly from nfsidmap in a nfsv4 with
  sec=krb5.  UID and GID are mapping properly on CentOS server and
  CentOS client.  Ubuntu nfs client file permissions are honored, but
  display in `ls -lan` command are incorrect.

  $ cat /var/log/syslog |grep nfsidmap
  Mar  8 16:38:34 ubuntuclient nfsidmap[24736]: key: 0x24a1c64d type: uid value: userY at xx.xx.edu@XX.XX.EDU timeout 600
  Mar  8 16:38:34 ubuntuclient nfsidmap[24736]: nfs4_name_to_uid: calling nsswitch->name_to_uid
  Mar  8 16:38:34 ubuntuclient nfsidmap[24736]: nss_getpwnam: name 'userX at xx.xx.edu@XX.XX.EDU' domain 'XX.XX.EDU': resulting localname '(null)'
  Mar  8 16:38:34 ubuntuclient nfsidmap[24736]: nss_getpwnam: name 'userX at xx.xx.edu@XX.XX.EDU' does not map into domain 'XX.XX.EDU'
  Mar  8 16:38:34 ubuntuclient nfsidmap[24736]: nfs4_name_to_uid: nsswitch->name_to_uid returned -22
  Mar  8 16:38:34 ubuntuclient nfsidmap[24736]: nfs4_name_to_uid: final return value is -22
  Mar  8 16:38:34 ubuntuclient nfsidmap[24736]: nfs4_name_to_uid: calling nsswitch->name_to_uid
  $
  $ mount -v -t nfs4 -o sec=krb5 SP19SRV.XX.XX.EDU:/export /mnt
  $ su userX
  $ ls -la /mnt
  total 4
  drwxr-xr-x  5 nobody 4294967294   50 Feb 28 18:04 .
  drwxr-xr-x 24 root   root       4096 Mar  7 22:34 ..
  drwxr-xr-x  2 nobody 4294967294  125 Mar  8 16:27 userX
  $

  Problem:
  nfsmapid isn't showing proper file permissions on the ubuntu nfsv4 client with sec=krb

  Client:
  mount -v -t nfs4 -o sec=krb5 SP19SRV.XX.XX.EDU:/export /mnt

  $ ls -la
  total 4
  drwxr-xr-x  5 nobody 4294967294   50 Feb 28 18:04 .
  drwxr-xr-x 24 root   root       4096 Mar  7 20:58 ..
  drwxr-xr-x  2 nobody 4294967294  112 Mar  7 14:30 username
  username at xx.xx.edu@ubuntuclient:/mnt

  $ cat /etc/idmapd.conf
  [General]

  Verbosity = 9
  Pipefs-Directory = /run/rpc_pipefs
  # set your own domain here, if it differs from FQDN minus hostname
  Domain = XX.XXX.EDU

  [Mapping]

  Nobody-User = nobody
  Nobody-Group = nogroup

  $ cat /etc/default/nfs-common
  STATDOPTS=

  # Do you want to start the gssd daemon? It is required for Kerberos mounts.
  NEED_GSSD="yes"
  NEED_IDMAPD="yes"

  # I've tried commenting out NEED_IDMAPD as well.

  My nfs server is a Centos 7.

  Both machines were joined to active directory with sssd.  NFSv4 with
  krb security works on my centos server and client.  The nfs server
  mount works on the ubuntu client and file permissions are honored.
  But, the ls -la command is showing the incorrect file permissions.

  uid and gid's appear to be in sync from sssd.  Note in
  /etc/sssd/sssd.conf ldap_id_mapping = False though I don't think that
  should matter since ids are the same on both client and server from
  the ldap attributes in AD.

  Centos 7 servers /var/log/messages with idmapd.conf verbosity:
  Mar  8 16:38:32 sp19srv rpc.idmapd[1224]: Server : (group) id "65534" -> name "nfsnobody at XX.XX.EDU"
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfsdcb: authbuf=gss/krb5 authtype=user
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_uid_to_name: calling nsswitch->uid_to_name
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_uid_to_name: nsswitch->uid_to_name returned 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_uid_to_name: final return value is 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: Server : (user) id "3872" -> name "userX at xx.xx.edu@XX.XX.EDU"
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfsdcb: authbuf=gss/krb5 authtype=group
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_gid_to_name: calling nsswitch->gid_to_name
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_gid_to_name: nsswitch->gid_to_name returned 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_gid_to_name: final return value is 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: Server : (group) id "110" -> name "some group gid at xx.xx.edu@XX.XX.EDU"
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfsdcb: authbuf=gss/krb5 authtype=user
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_uid_to_name: calling nsswitch->uid_to_name
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_uid_to_name: nsswitch->uid_to_name returned 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_uid_to_name: final return value is 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: Server : (user) id "0" -> name "root at XX.XX.EDU"
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfsdcb: authbuf=gss/krb5 authtype=group
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_gid_to_name: calling nsswitch->gid_to_name
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_gid_to_name: nsswitch->gid_to_name returned 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_gid_to_name: final return value is 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: Server : (group) id "0" -> name "root at XX.XX.EDU"
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfsdcb: authbuf=gss/krb5 authtype=user
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_uid_to_name: calling nsswitch->uid_to_name
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_uid_to_name: nsswitch->uid_to_name returned 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: nfs4_uid_to_name: final return value is 0
  Mar  8 16:38:34 sp19srv rpc.idmapd[1224]: Server : (user) id "1630" -> name "userX at xx.xx.edu@XX.XX.EDU"

  Please let me know if you need any additional information, thanks,

  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: nfs-common 1:1.3.4-2.1ubuntu5
  ProcVersionSignature: Ubuntu 4.15.0-46.49-generic 4.15.18
  Uname: Linux 4.15.0-46-generic x86_64
  ApportVersion: 2.20.9-0ubuntu7.5
  Architecture: amd64
  Date: Fri Mar  8 17:48:13 2019
  ProcEnviron:
   TERM=xterm-256color
   PATH=(custom, no user)
   LANG=C.UTF-8
   SHELL=/bin/bash
  SourcePackage: nfs-utils
  UpgradeStatus: No upgrade log present (probably fresh install)
  mtime.conffile..etc.default.nfs-common: 2019-03-07T21:45:28.468860

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libnfsidmap/+bug/1819197/+subscriptions



More information about the foundations-bugs mailing list