OpenSolaris

Printable Version Enter a New Search
Bug ID 6775211
Synopsis mirror mounts use the zcred; should use caller's cr augmented w/ PRIV_SYS_MOUNT
State 10-Fix Delivered (Fix available in build)
Category:Subcategory kernel:nfsv4
Keywords
Responsible Engineer Thomas Haynes
Reported Against snv_98
Duplicate Of
Introduced In solaris_nevada
Commit to Fix snv_112
Fixed In snv_112
Release Fixed solaris_nevada(snv_112)
Related Bugs 4837290
Submit Date 22-November-2008
Last Update Date 8-April-2009
Description 
Mirror mounts that need krb5 creds fail if the host does not have
host creds but the user does.  Instead they should succeed.

This is a mirror-mounts variant of 4837290.
Work Around 
Use NFSv3 instead of NFSv4.
Or add a host key into /etc/krb5/krb5.keytab (for static IP systems only).
Comments 
This interacts badly with the automounter because mirror mounts
inherit the mount options from the "parent" mount.

On a client with no host creds, but as a user with creds,

	cd /net/someserver/someshare

where someshare mounts -o sec=krb5i (it's exported sec=krb5i,sys,
say).  Then

	cd some-subdir-that-triggers-a-mirror-mount

It will fail, and the console will get spam (something about the
mountpoint not existing).