[gpfsug-discuss] export nfs share on gpfs with no authentication

[Michael L Taylor]

Hi Jonathon,
We were able to run this scenario successfully in our lab at the latest
released 4.2.3.4.

# /usr/lpp/mmfs/bin/mmdiag --version

=== mmdiag: version ===
Current GPFS build: "4.2.3.4 ".

# /usr/lpp/mmfs/bin/mmces service list -a
Enabled services: NFS
node1.test.ibm.com:  NFS is running

# /usr/lpp/mmfs/bin/mmuserauth service create --data-access-method file
--type userdefined
File authentication configuration completed successfully.

# rpm -qa | grep gpfs
gpfs.ext-4.2.3-4.x86_64
gpfs.docs-4.2.3-4.noarch
gpfs.gskit-8.0.50-75.x86_64
gpfs.gpl-4.2.3-4.noarch
gpfs.msg.en_US-4.2.3-4.noarch
nfs-ganesha-gpfs-2.3.2-0.ibm47.el7.x86_64
gpfs.base-4.2.3-4.x86_64

# rpm -qa | grep nfs-gan
nfs-ganesha-utils-2.3.2-0.ibm47.el7.x86_64
nfs-ganesha-2.3.2-0.ibm47.el7.x86_64
nfs-ganesha-gpfs-2.3.2-0.ibm47.el7.x86_64

From:	gpfsug-discuss-request at spectrumscale.org
To:	gpfsug-discuss at spectrumscale.org
Date:	09/20/2017 12:07 PM
Subject:	gpfsug-discuss Digest, Vol 68, Issue 42
Sent by:	gpfsug-discuss-bounces at spectrumscale.org



Send gpfsug-discuss mailing list submissions to
		 gpfsug-discuss at spectrumscale.org

To subscribe or unsubscribe via the World Wide Web, visit

https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=BpVUgvFT2Qwgw0hveEgQaHFwn2mjeQjeBrkXHX_aC0A&m=2oGcWc1xx6zOclryoU2BdJykABuIR118zXTmSAA8msU&s=7q0JMYVHMSGlUAYquNMlrDRF6BDj6-76Oc4VbXrvlHE&e=

or, via email, send a message with subject or body 'help' to
		 gpfsug-discuss-request at spectrumscale.org

You can reach the person managing the list at
		 gpfsug-discuss-owner at spectrumscale.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of gpfsug-discuss digest..."


Today's Topics:

   1. Re: export nfs share on gpfs with no authentication
      (Jonathon A Anderson)


----------------------------------------------------------------------

Message: 1
Date: Wed, 20 Sep 2017 18:55:04 +0000
From: Jonathon A Anderson <jonathon.anderson at colorado.edu>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Subject: Re: [gpfsug-discuss] export nfs share on gpfs with no
		 authentication
Message-ID:

<BN3PR03MB1382716A1217732854ED7C3F80610 at BN3PR03MB1382.namprd03.prod.outlook.com>


Content-Type: text/plain; charset="us-ascii"

I shouldn't need SMB for authentication if I'm only using userdefined
authentication, though.

________________________________________
From: gpfsug-discuss-bounces at spectrumscale.org
<gpfsug-discuss-bounces at spectrumscale.org> on behalf of Sobey, Richard A
<r.sobey at imperial.ac.uk>
Sent: Wednesday, September 20, 2017 2:23:37 AM
To: gpfsug main discussion list
Subject: Re: [gpfsug-discuss] export nfs share on gpfs with no
authentication

This sounded familiar to a problem I had to do with SMB and NFS. I've
looked, and it's a different problem, but at the time I had this response.

"That would be the case when Active Directory is configured for
authentication. In that case the SMB service includes two aspects: One is
the actual SMB file server, and the second one is the service for the
Active Directory integration. Since NFS depends on authentication and id
mapping services, it requires SMB to be running."

I suspect the last paragraph is relevant in your case.

HTH

Richard

-----Original Message-----
From: gpfsug-discuss-bounces at spectrumscale.org [
mailto:gpfsug-discuss-bounces at spectrumscale.org] On Behalf Of Jonathon A
Anderson
Sent: 20 September 2017 06:13
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Subject: Re: [gpfsug-discuss] export nfs share on gpfs with no
authentication

Returning to this thread cause I'm having the same issue as Ilan, above.

I'm working on setting up CES in our environment after finally getting a
blocking bugfix applied. I'm making it further now, but I'm getting an
error when I try to create my export:


---
[root at sgate2 ~]# mmnfs export add /gpfs/summit/scratch --client
'login*.rc.int.colorado.edu(rw,root_squash);dtn*.rc.int.colorado.edu
(rw,root_squash)'
mmcesfuncs.sh: Current authentication: none is invalid.
This operation can not be completed without correct Authentication
configuration.
Configure authentication using:   mmuserauth
mmnfs export add: Command failed. Examine previous error messages to
determine cause.
---


When I try to configure mmuserauth, I get an error about not having SMB
active; but I don't want to configure SMB, only NFS.


---
[root at sgate2 ~]# /usr/lpp/mmfs/bin/mmuserauth service create
--data-access-method file --type userdefined
: SMB service not enabled. Enable SMB service first.
mmcesuserauthcrservice: Command failed. Examine previous error messages to
determine cause.
---

How can I configure NFS exports with mmnfs without having to enable SMB?

~jonathon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20170921/4ab85c21/attachment-0002.htm>