Bug 1013468

[root@dhcp-13-136 ~]# lsb_release -sir; rpm -q nfs-utils
RedHatEnterpriseWorkstation 7.0
nfs-utils-1.2.8-4.1.el7.x86_64
[root@dhcp-13-136 ~]# ps axf | grep mountd
17585 pts/1    S+     0:00          \_ grep --color=auto mountd
17511 ?        Ss     0:00 rpc.mountd --no-tcp
[root@dhcp-13-136 ~]# rpcinfo -s 
   program version(s) netid(s)                         service     owner
    100000  2,3,4     local,udp,tcp,udp6,tcp6          portmapper  superuser
    100024  1         tcp6,udp6,tcp,udp                status      29
    100005  3,2,1     tcp6,udp6,tcp,udp                mountd      superuser

   <<<---  -n or --no-tcp can not work

[root@dhcp-13-136 ~]# rpc.mountd -n -N 4
[root@dhcp-13-136 ~]# rpcinfo -s 
   program version(s) netid(s)                         service     owner
    100000  2,3,4     local,udp,tcp,udp6,tcp6          portmapper  superuser
    100024  1         tcp6,udp6,tcp,udp                status      29
    100005  3,2,1     tcp6,udp6,tcp,udp                mountd      superuser
[root@dhcp-13-136 ~]# ps axf | grep rpc.mountd
14057 pts/2    S+     0:00          \_ grep --color=auto rpc.mountd
14054 ?        Ss     0:00 rpc.mountd -n -N 4

even with -N 4 rpc.mountd still can not turn off tcp port;

I have take a look at as to why -n no longer works. It happen when nfs-utils 
switched from the glibc RPC code to the libtirpc RPC code, a few years
back... 

I personally believe, not being able to turn off TCP mount is a good thing! I 
think the bug should be you can't turn of UDP mounts because that's
what we really want... 

With that said... there actually is ways to turn of both UDP and TCP mount.
Simply comment out the 
     "udp        tpi_clts      v     inet     udp"
     "tcp        tpi_cots_ord  v     inet     tcp"

lines in the /etc/netconfig, at least in theory... 

So, I'm going to close this bug as WONTFIX and work with upstream 
to eliminate this flag completely...

(In reply to Steve Dickson from comment #5)
> I have take a look at as to why -n no longer works. It happen when nfs-utils 
> switched from the glibc RPC code to the libtirpc RPC code, a few years
> back... 
> 
> I personally believe, not being able to turn off TCP mount is a good thing!
> I 
> think the bug should be you can't turn of UDP mounts because that's
> what we really want... 
So strange reason...
Fix this problem is difficult to do?

> 
> With that said... there actually is ways to turn of both UDP and TCP mount.
> Simply comment out the 
>      "udp        tpi_clts      v     inet     udp"
>      "tcp        tpi_cots_ord  v     inet     tcp"
> 
> lines in the /etc/netconfig, at least in theory... 
> 
> So, I'm going to close this bug as WONTFIX and work with upstream 
> to eliminate this flag completely...

I think ..  we should from user perspective.
  If it can not turn off TCP, At least please delete the -n|--no-tcp option,
  and add description in man pages.

please think if you are a user of the tools;

The test is invalid, I would not flag this as a beta blocker or a test blocker (which holds up beta).

We can certainly look at updating documentation and removing the option, but I suggest that is relatively low priority (although I do agree we should clean it up for users).

Thanks!

(In reply to Ric Wheeler from comment #7)
> The test is invalid, I would not flag this as a beta blocker or a test
> blocker (which holds up beta).
Agreed to remove testblocker, if you insist;
   (I try other method to close tcp to reproduce ...)
But Do not agree WONTFIX.
> 
> We can certainly look at updating documentation and removing the option, but
> I suggest that is relatively low priority (although I do agree we should
> clean it up for users).
Low priority is ok, unimportant.
But for backward compatibility, not suggest delete the option.
better fix it in RC, or more later if you have not time.

> 
> Thanks!

And.. I try the the follow patch, it works; you can and other condition:
    if ((-n) and (-N 4) and (netconfig is tcp)) continue;
It is easy to fix.

diff --git a/support/nfs/svc_create.c b/support/nfs/svc_create.c
index c159fc8..3bbeefc 100644
--- a/support/nfs/svc_create.c
+++ b/support/nfs/svc_create.c
@@ -416,6 +416,9 @@ nfs_svc_create(char *name, const rpcprog_t program, const rpcvers_t version,
        while ((nconf = getnetconfig(handlep)) != NULL) {
                if (!(nconf->nc_flag & NC_VISIBLE))
                        continue;
+               if (_rpcfdtype == SOCK_DGRAM && !strncmp(nconf->nc_proto,"tcp", 3)) {
+                       continue;
+               }
                visible++;
                if (port == 0)
                        servport = getservport(program, nconf->nc_proto);

Although the -n option is not often used, but user can use it for debug/test and so on; and since it has not been deleted, please ensure that it functions available;

And Please refer the rpc.nfsd implement:
    if can not turn off give reason for user. if no reason fix it.
# rpc.nfsd -T
rpc.nfsd: version 4 requires the TCP protocol
[root@dhcp12-241 mountd]# rpc.nfsd --no-tcp
rpc.nfsd: version 4 requires the TCP protocol
[root@dhcp12-241 mountd]# echo $?
1

In fact nfs4 need not rpc.mountd as a rpc server, just as a userland daemon listen on the local rpc cache file; right?

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: /CoreOS/nfs-utils/commands/utils/rpc-mountd::Test ==- rpc.mountd -n --no-tcp
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::


================================================================================
[01:38:31 root@ /mnt/tests/CoreOS/nfs-utils/commands/utils/rpc-mountd]# rpc.mountd -n -N 4
:: [   PASS   ] :: Running 'rpc.mountd -n -N 4' (Expected 0, got 0)
--------------------------------------------------------------------------------

================================================================================
[01:38:31 root@ /mnt/tests/CoreOS/nfs-utils/commands/utils/rpc-mountd]# ps axf | grep -v grep | grep "rpc.mountd -n"
11046 ?        Ss     0:00 rpc.mountd -n -N 4
:: [   PASS   ] :: Running 'ps axf | grep -v grep | grep "rpc.mountd -n"' (Expected 0, got 0)
--------------------------------------------------------------------------------

================================================================================
[01:38:32 root@ /mnt/tests/CoreOS/nfs-utils/commands/utils/rpc-mountd]# rpcinfo -p | grep -w mountd | grep -w tcp
:: [   PASS   ] :: Running 'rpcinfo -p | grep -w mountd | grep -w tcp' (Expected 1, got 1)
--------------------------------------------------------------------------------

================================================================================
[01:38:32 root@ /mnt/tests/CoreOS/nfs-utils/commands/utils/rpc-mountd]# pkill rpc.mountd
:: [   PASS   ] :: Running 'pkill rpc.mountd' (Expected 0, got 0)
--------------------------------------------------------------------------------

================================================================================
[01:38:32 root@ /mnt/tests/CoreOS/nfs-utils/commands/utils/rpc-mountd]# rpc.mountd --no-tcp -N 4
:: [   PASS   ] :: Running 'rpc.mountd --no-tcp -N 4' (Expected 0, got 0)
--------------------------------------------------------------------------------

================================================================================
[01:38:32 root@ /mnt/tests/CoreOS/nfs-utils/commands/utils/rpc-mountd]# ps axf | grep -v grep | grep "rpc.mountd --no-tcp"
11107 ?        Ss     0:00 rpc.mountd --no-tcp -N 4
:: [   PASS   ] :: Running 'ps axf | grep -v grep | grep "rpc.mountd --no-tcp"' (Expected 0, got 0)
--------------------------------------------------------------------------------

================================================================================
[01:38:32 root@ /mnt/tests/CoreOS/nfs-utils/commands/utils/rpc-mountd]# rpcinfo -p | grep -w mountd | grep -w tcp
:: [   PASS   ] :: Running 'rpcinfo -p | grep -w mountd | grep -w tcp' (Expected 1, got 1)
--------------------------------------------------------------------------------

================================================================================
[01:38:32 root@ /mnt/tests/CoreOS/nfs-utils/commands/utils/rpc-mountd]# pkill rpc.mountd
:: [   PASS   ] :: Running 'pkill rpc.mountd' (Expected 0, got 0)
--------------------------------------------------------------------------------

This request was resolved in Red Hat Enterprise Linux 7.0.

Contact your manager or support representative in case you have further questions about the request.

Additional info:

fixed in upstream:
commit a80482157632584ee03df58ed1eef3cefd95bbcb
Author: Steve Dickson <steved>
Date:   Tue Nov 5 14:10:05 2013 -0500

    mountd: Use protocol bit fields to turn protocols off.
    
    Convert the current code to used the NFSCTL_XXX macros
    to turn off the TCP listener.
    
    Signed-off-by: Steve Dickson <steved>