On Tue, 2014-08-05 at 15:26 +0100, McCall, Andy (IT.PFMS) wrote:
> >> I've been following some guides for mounting a DFS root namespace that
> >> is known to work on Windows boxes on a fresh updated RHEL6.5 install.
> >>
> >> I can mount the shares directly from each node within the DFS cluster
> >> with no issues:
> >>
> >> [root@myserver ~]# mount -t cifs -v //node1.my.domain.com/myroot/
> >> /share -o username=mydomainaccount
> >> Password:
> >> mount.cifs kernel mount options:
> >> ip=192.168.10.1,unc=\\node1.my.domain.com\share,,ver=1,user=mydomainac
> >> co
> >> unt,pass=********
> >>
> >> [root@myserver ~]# mount | grep share //node1.my.domain.com/share/
> >> on /share type cifs (rw)
> >>
> >> But if I try and mount against the DFS root namespace it fails:
> >>
> >> mount -t cifs -v //my.domain.com/myroot /share -o username=
> >> mydomainaccount,domain=my.domain.com
> >> Password:
> >> mount.cifs kernel mount options:
> >> ip=192.168.1.1,unc=\\my.domain.com\myroot,,ver=1,user=mydomainaccount,
> >> do
> >> main=my.domain.com,pass=********
> >> mount.cifs kernel mount options: ip=192.168.1.2,unc=\\my.domain.com
> >> \myroot,,ver=1,user=mydomainaccount,domain=my.domain.com,pass=********
> >> Unable to find suitable address.
> >>
> >> The IP addresses 192.168.1.1, 192.168.1.1 are the DNS / domain
> >> servers, not the DFS node servers, leading me to believe I'm not
> >> getting referrals to the underlying nodes. A tcpdump host against my
> >> nodes while trying to mount the share confirms this, indicating its
> >> trying to mount /share from the domain servers - which is why it fails.
> >>
> >> I've followed all the guides and as far as I can tell, this should be
> >> fairly easy by configuring request-key.d files:
> >>
> >> [root@myserver request-key.d]# cat
> >> /etc/request-key.d/dns_resolver.conf
> >> create dns_resolver * * /usr/sbin/cifs.upcall %k
> >>
> >> [root@myserver request-key.d]# cat /etc/request-key.d/cifs.spnego.conf
> >> create cifs.spnego * * /usr/sbin/cifs.upcall -t %k
> >>
> >> Can someone give me some pointers as to where things could be going
> >> wrong? I'm no expert at DFS, but I'd like to know I'm at least
> >> looking in the correct place.
>
> > The cifs upcall looks for the username (maybe 'user' will work) in the keytab.
> > However we do not seem to have any way to tell cifs that that the unc you have
> > specified is part of DFS and so it treats the domain part of the unc as the host
> > where the share is stored, which of course it then can't find.
> >
> > FWIW, we gave up on this a few weeks ago and set up a real cluster with CTDB. A
> > lot more effort but it solved our file server problems.
> >
> > I hope you'll be able to prove us wrong and that all our work has been for nothing
> > and that domain DFS works fine. We were unable to get it to work.
>
> I've just swapped /usr/sbin/cifs.upcall out for a script that echo's test to /tmp/text.txt
> and cifs.upcall isn't actually being called at all in my case.
You may already have a ticket.
>
> Other people seem to be able to mount root namespaces with no issues? Is this a RHEL bug?
>
> Thanks,
>
> AM
> DISCLAIMER. The contents of this email and its attachments are intended solely for the original recipients and express the views of the authors and not necessarily the Company. If you are not the intended recipient please delete without copying or forwarding and inform the sender that you received it in error.
> Provident Financial Management Services Ltd, Registered in England, Company Number 328933. Interim Permissions Reference Number: 119219
> Provident Personal Credit Ltd, Registered in England, Company Number 146091. Interim Permissions Reference Number: 002529
> Both Provident Financial Management Services Ltd and Provident Personal Credit Ltd are authorised and regulated by the Financial Conduct Authority, see Interim Permissions numbers above. Registered Office: No.1 Godwin Street, Bradford, West Yorkshire BD1 2SU, United Kingdom.
>
> Please save paper - don't print this email unless necessary
> NrybXǧv^){.n+{r'{ay ʇڙ,jfhz w j:+vwjmzZ+ݢj"!
--
To unsubscribe from this list: send the line "unsubscribe linux-cifs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
