Red Hat Bugzilla – Bug 839215
nfs-server.service bound to nfs-idmap.service, cannot start independently
Last modified: 2012-11-09 18:56:58 EST
Description of problem:
Starting nfs-idmap.service on an nfs client automatically activates nfs-server.service which is wholly unneeded. i could understand activating nfs-idmap.service when nfs-server.service is started, but not the other way around.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. systemctl start nfs-idmap.service
2. ps ax | grep nfsd
nfsd is active and listening
no nfs server please
idmap is a program that runs in the client, it does not require nfs server to be started, which is also a security risk.
masking nfs-server.service leads to nfs-idmap.service not being startable.
I'm unsure on the recent changes to NFS idmaping and finding some issues. I'm not sure if the nfs-idmap.service is needed for clients as there is now an nfsidmap program provided to do idmapping? Do you have anything in /etc/request-key.d/id_resolver.conf?
Yeah, idmapd shouldn't be necessary any more. (On the client side, that is. On the server side, idmapd is still used.)
# nfsidmap(5) - The NFS idmapper upcall program
# Summary: Used by NFSv4 to map user/group ids into
# user/group names and names into in ids
# -v Increases the verbosity of the output to syslog
# -t timeout Set the expiration timer, in seconds, on the key
create id_resolver * * /usr/sbin/nfsidmap %k %d
(In reply to comment #0)
> Description of problem:
> Starting nfs-idmap.service on an nfs client automatically activates
> nfs-server.service which is wholly unneeded. i could understand activating
> nfs-idmap.service when nfs-server.service is started, but not the other way
I have a feeling this is happening because of the "BindTo=nfs-server.service"
in the nfs-idmap.service which was a suggestion from the systemd
guys (see bz 769879). Any suggestions to what I should change that
I was going to say "how can you close this as notabug, who here doesn't understand that the idmapper and the NFS server can and many do use them independently?" but then I remembered I don't care anymore since I no longer use Fedora. LOL.