Bug 358621 - rpcbind-0.1.4-8.fc7 breaks NFS
Summary: rpcbind-0.1.4-8.fc7 breaks NFS
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: rpcbind
Version: 7
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Steve Dickson
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 363811 (view as bug list)
Depends On:
Blocks: 418441
TreeView+ depends on / blocked
 
Reported: 2007-10-30 17:08 UTC by H.J. Lu
Modified: 2008-01-11 22:00 UTC (History)
3 users (show)

Fixed In Version: 0.1.4-12.fc8
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-01-11 22:00:24 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description H.J. Lu 2007-10-30 17:08:11 UTC
With rpcbind-0.1.4-8.fc7, kernel reported

Installing knfsd (copyright (C) 1996 okir.de).
NFSD: Using /var/lib/nfs/v4recovery as the NFSv4 state recovery directory
NFSD: starting 90-second grace period
call_verify: server localhost requires stronger authentication.
RPC: failed to contact local rpcbind server (errno 13).
call_verify: server localhost requires stronger authentication.
RPC: failed to contact local rpcbind server (errno 13).
call_verify: server localhost requires stronger authentication.
RPC: failed to contact local rpcbind server (errno 13).
lockd_up: makesock failed, error=-13
call_verify: server localhost requires stronger authentication.
RPC: failed to contact local rpcbind server (errno 13).

when starting nfs. Revert to rpcbind-0.1.4-6.fc7 fixes nfs.

Comment 1 H.J. Lu 2007-10-30 17:12:26 UTC
Adding

ALL: localhost

to /etc/hosts.allow fixes the problem.

Comment 2 Mike Cohler 2007-10-30 17:59:04 UTC
I have also had problems today - reported at
http://marc.info/?t=119374079500001&r=1&w=2

I tried H.J. Lu's suggestion from #1 above and it fixes the problem for me also.


Comment 3 H.J. Lu 2007-10-30 18:12:14 UTC
Depending on /etc/hosts, I also need

ALL: 127.0.0.1

in /etc/hosts.allow.

Comment 4 Mike Cohler 2007-10-30 19:28:42 UTC
I have also now done the yum update to the same version of rpcbind on the nfs
client machine, running F7 with a fully updated system, and it would not see the
nfs share until the same workaround as in comment #1 was made. Then after
restarting it all works fine again - but I do not know if there are now security
implications as a result?

So this is a problem on both nfs server and nfs client.

Comment 5 Mike Cohler 2007-10-30 19:47:12 UTC
I notice that nfs-utils was also updated today - is it possible that the
breakage was not due to rpcbind update but nfs-utils update?

Comment 6 Joe Orton 2007-11-01 09:13:01 UTC
This seems to have regressed due to the fix for bug 248284.

Comment 7 Steve Dickson 2007-11-01 11:18:02 UTC
I agree, this is a regression due to bug 248284, but I'm
not sure what the answer is either. Should there be some type
of configuration knob to tell rpcbind when to used the
libwrap files?

Comment 8 Joe Orton 2007-11-02 11:21:49 UTC
If you can't work out what the right thing to do is then just revert the change
and fix the regression.  This is breaking NFS for *everybody who updates*.  At
least withdraw the update.

Comment 9 H.J. Lu 2007-11-02 13:34:35 UTC
I think rpcbind.spec should add

ALL: 127.0.0.1
ALL: localhost

to /etc/hosts.allow during install if they aren't there and /etc/hosts.deny
isn't empty.

Comment 10 Joe Orton 2007-11-08 09:13:01 UTC
*** Bug 363811 has been marked as a duplicate of this bug. ***

Comment 11 Fedora Update System 2007-12-20 19:53:20 UTC
rpcbind-0.1.4-12.fc8 has been pushed to the Fedora 8 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update rpcbind'

Comment 12 Fedora Update System 2008-01-11 22:00:22 UTC
rpcbind-0.1.4-12.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.