[gpfsug-discuss] export nfs share on gpfs with no authentication

Wed Sep 20 06:13:13 BST 2017

Returning to this thread cause I'm having the same issue as Ilan, above.

I'm working on setting up CES in our environment after finally getting a blocking bugfix applied. I'm making it further now, but I'm getting an error when I try to create my export:

---
[root at sgate2 ~]# mmnfs export add /gpfs/summit/scratch --client 'login*.rc.int.colorado.edu(rw,root_squash);dtn*.rc.int.colorado.edu(rw,root_squash)'
mmcesfuncs.sh: Current authentication: none is invalid.
This operation can not be completed without correct Authentication configuration.
Configure authentication using:   mmuserauth
mmnfs export add: Command failed. Examine previous error messages to determine cause.
---

When I try to configure mmuserauth, I get an error about not having SMB active; but I don't want to configure SMB, only NFS.

---
[root at sgate2 ~]# /usr/lpp/mmfs/bin/mmuserauth service create --data-access-method file --type userdefined
: SMB service not enabled. Enable SMB service first.
mmcesuserauthcrservice: Command failed. Examine previous error messages to determine cause.
---

How can I configure NFS exports with mmnfs without having to enable SMB?

~jonathon
________________________________________
From: gpfsug-discuss-bounces at spectrumscale.org <gpfsug-discuss-bounces at spectrumscale.org> on behalf of Varun Mittal3 <varun.mittal at in.ibm.com>
Sent: Tuesday, July 25, 2017 9:44:24 PM
To: gpfsug main discussion list
Subject: Re: [gpfsug-discuss] export nfs share on gpfs with no authentication

Sorry a small typo:
mmuserauth service create --data-access-method file --type userdefined

Best regards,
Varun Mittal
Cloud/Object Scrum @ Spectrum Scale
ETZ, Pune

[Inactive hide details for Varun Mittal3---26/07/2017 09:12:27 AM---Hi Did you try to run this command from a CES designated nod]Varun Mittal3---26/07/2017 09:12:27 AM---Hi Did you try to run this command from a CES designated node ?

From: Varun Mittal3/India/IBM
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: 26/07/2017 09:12 AM
Subject: Re: [gpfsug-discuss] export nfs share on gpfs with no authentication

________________________________

Hi

Did you try to run this command from a CES designated node ?

If no, then try executing the command from a CES node:
mmuserauth service create --data-access-type file --type userdefined

Best regards,
Varun Mittal
Cloud/Object Scrum @ Spectrum Scale
ETZ, Pune

[Inactive hide details for Ilan Schwarts ---25/07/2017 10:22:26 AM---Hi, While trying to add the userdefined auth, I receive err]Ilan Schwarts ---25/07/2017 10:22:26 AM---Hi, While trying to add the userdefined auth, I receive error that SMB

From: Ilan Schwarts <ilan84 at gmail.com>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: 25/07/2017 10:22 AM
Subject: Re: [gpfsug-discuss] export nfs share on gpfs with no authentication
Sent by: gpfsug-discuss-bounces at spectrumscale.org
________________________________

Hi,

While trying to add the userdefined auth, I receive error that SMB
service not enabled.
I am currently working on a spectrum scale cluster, and i dont have
the SMB package, I am waiting for it.. is there a way to export NFSv3
using the spectrum scale tools without SMB package ?
[root at LH20-GPFS1 ~]# mmuserauth service create --type userdefined
: SMB service not enabled. Enable SMB service first.
mmcesuserauthcrservice: Command failed. Examine previous error
messages to determine cause.

I exported the NFS via /etc/exports and than ./exportfs -a .. It works
fine, I was able to mount the gpfs export from another machine.. this
was my work-around since the spectrum scale tools failed to export
NFSv3

On Mon, Jul 24, 2017 at 7:35 PM,  <valdis.kletnieks at vt.edu> wrote:
> On Mon, 24 Jul 2017 13:36:41 +0300, Ilan Schwarts said:
>> Hi,
>> I have gpfs with 2 Nodes (redhat).
>> I am trying to create NFS share - So I would be able to mount and
>> access it from another linux machine.
>
>> While trying to create NFS (I execute the following):
>> [root at LH20-GPFS1 ~]# mmnfs export add /fs_gpfs01 -c "*
>> Access_Type=RW,Protocols=3:4,Squash=no_root_squash)"
>
> You can get away with little to no authentication for NFSv3, but
> not for NFSv4.  Try with Protocols=3 only and
>
> mmuserauth service create --type userdefined
>
> that should get you Unix-y NFSv3 UID/GID support and "trust what the NFS
> client tells you".  This of course only works sanely if each NFS export is
> only to a set of machines in the same administrative domain that manages their
> UID/GIDs.  Exporting to two sets of machines that don't coordinate their
> UID/GID space is, of course, where hilarity and hijinks ensue....
>
> _______________________________________________
> gpfsug-discuss mailing list
> gpfsug-discuss at spectrumscale.org
> http://gpfsug.org/mailman/listinfo/gpfsug-discuss
>

--

-
Ilan Schwarts
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss