| Summary: | method sss missing for nfsidmap sssd and nfs-idmapd | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | rob.verduijn |
| Component: | libnfsidmap | Assignee: | Tim Fenn <tim.fenn> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 24 | CC: | rob.verduijn, steved, tim.fenn |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-09-14 14:17:00 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
rob.verduijn
2016-09-12 18:29:02 UTC
(In reply to rob.verduijn from comment #0) > Description of problem: > > After updating sssd and all sub packages to 1.14.1-2 the nfs-idmapd service > refuses to start with the error : cannot find method sss. > The plugin loading code has not change for a very long time. Just curious of you set "Method=nsswitch" do things work? also add some debugging by using the -vvv argument which should log things to /var/log/message. Hi, After some chatting in forums the solution was to install sssd-nfs-idmap That was new with 1.14 See https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1 A heads up when these changes happen would have been nice, In the future I'll keep an eye on the release notes. And the method nsswitch did partially work. nfs-idmapd started again but all files on the kerberos nfs4 belonged to nobody:nobody Rob Verduijn also forgot to mention method=sss works again after the new package sssd-nfs-idmap was installed. Rob Verduijn (In reply to rob.verduijn from comment #2) > Hi, > > After some chatting in forums the solution was to install sssd-nfs-idmap > That was new with 1.14 > See > https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1 > > A heads up when these changes happen would have been nice, I agree... > > In the future I'll keep an eye on the release notes. > > And the method nsswitch did partially work. > nfs-idmapd started again but all files on the kerberos nfs4 belonged to > nobody:nobody Again, just curious... Why uses the sssd plugin in the first place? What does it do the nsswitch plugin does not? the nsswitch plugin sets nobody:nobody as owner of all files and dirs sss sets the right owner:group. In the combination server centos 7.2 freeipa 4.2 nfs4 mount with sec=krb5p the client with method=sss worked for me and method=nsswitch doesn't. I don't know why method=nsswitch does not work properly and grew tired in the past in figuring out what was needed to get it to work. I always used method=nsswitch until it started to break for unknown reasons. Then I read about method=sss in a forum (freeipa-users) which worked so I used that. Rob Verduijn the client is fedora 24 x86_64 Rob Verduijn (In reply to rob.verduijn from comment #5) > the nsswitch plugin sets nobody:nobody as owner of all files and dirs > sss sets the right owner:group. > > In the combination server centos 7.2 freeipa 4.2 nfs4 mount with sec=krb5p > the > client with method=sss worked for me and method=nsswitch doesn't. Hmm... I wonder what sss does differently than nsswitch... > > I don't know why method=nsswitch does not work properly and grew tired in > the past in figuring out what was needed to get it to work. > I always used method=nsswitch until it started to break for unknown reasons. > Then I read about method=sss in a forum (freeipa-users) which worked so I > used that. Ok thanks for the info... |