From owner-freebsd-questions@FreeBSD.ORG Thu Jan 27 10:27:35 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B80B916A4CE for ; Thu, 27 Jan 2005 10:27:35 +0000 (GMT) Received: from t-x.dignus.nl (t-x.dignus.nl [83.219.88.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3B2C843D41 for ; Thu, 27 Jan 2005 10:27:35 +0000 (GMT) (envelope-from colin@kenmore.kozy-kabin.nl) Received: from localhost (localhost.dignus.nl [127.0.0.1]) by t-x.dignus.nl (Safehouse) with ESMTP id 56BBC2841E; Thu, 27 Jan 2005 11:27:49 +0100 (CET) Received: from kenmore.kozy-kabin.nl (cjr-home [62.251.72.148]) by t-x.dignus.nl (Safehouse) with ESMTP id 7D2092841C; Thu, 27 Jan 2005 11:27:44 +0100 (CET) Received: from kenmore.kozy-kabin.nl (localhost.kozy-kabin.nl [127.0.0.1]) by kenmore.kozy-kabin.nl (Postfix) with ESMTP id A259262A6; Thu, 27 Jan 2005 11:27:24 +0100 (CET) Received: from localhost (colin@localhost)j0RARFiN029481; Thu, 27 Jan 2005 11:27:19 +0100 (CET) (envelope-from colin@kenmore.kozy-kabin.nl) Date: Thu, 27 Jan 2005 11:27:15 +0100 From: "Colin J. Raven" To: Kris Kennaway In-Reply-To: <20050126204835.GA30142@xor.obsecurity.org> Message-ID: <20050127112203.V2927@kenmore.kozy-kabin.nl> References: <200501262040.j0QKewPa028443@mail-core.space2u.com> <20050126204835.GA30142@xor.obsecurity.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: by RemSPAMd at ph230.plushosting.nl cc: Joachim Dagerot cc: freebsd-questions@freebsd.org Subject: Re: NFS Mounting, client credentials too weak X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Jan 2005 10:27:35 -0000 On Jan 26 at 12:48, Kris Kennaway said: > On Wed, Jan 26, 2005 at 09:40:58PM +0100, Joachim Dagerot wrote: >> >> On 2005-01-26 Kris Kennaway wrote: >> >> On Wed, Jan 26, 2005 at 09:25:08AM +0100, Colin J. Raven wrote: >>>> On Jan 25 at 12:04, Kris Kennaway wrote: >>>> >>>>> On Tue, Jan 25, 2005 at 12:39:59PM +0100, Joachim Dagerot wrote: >>>>>> >>>>>> I'm trying to mount from a freeSBIE system (freeBSD 5.3) to my freeBSD >>>>>> server (5.1) when I get the errormessage: RPCPROG_MNT: RPC: >>>>>> Authentication error; why = Client credential too weak. >>>>>> >>>>>> What can I do? >>>>> >>>>> Try to mount as root, not a nonprivileged user. >>>> >>>> Unfortunately I ran into the same situation concerning the error message >>>> above. I *was* root when it happened. I thought perhaps the problem was >>>> that I was *su'd* to root, so I connected a monitor to the client, >>>> logged in *as* root then tried to mount the remote share (from my office >>>> server). Still the same result. >>> >>>> To further complicate (or simplify) things, *both* machines are >>>> 5.3-RELEASE, and in fact the machines themselves are as close to clones >>>> of one another as you can get. I mention this because inconsistencies >>>> between local conditions on both machines thus becomes a non-issue. >>> >>> What two machines? Above you said one is a FreeSBIE-based 5.3 system >>> and the other a 5.1 system. >> >> I am me and me is Joachim. Colin is Colin and never shall their system be mixed up. > > OK, thanks for clarifying :-) > > Are you running the full set of nfs daemons on client and server > (nfs_server_enable/nfs_client_enable in rc.conf)? OK, this is Colin (FreeBSD 5.3 -> 5.3) I'm glad Joachim got his issues resolved by mounting as root. I wish I could do the same :-) I don't have nfs_server_enable="YES" on the "client" machine, only because...well...it's the client machine. No "howto" I've read (so far) has advocated doing that as a client machine requirment - unless that is - you're also exporting a share in the other direction. That said though, it's a trivial matter to try out and see if it makes a difference. I can't see why it might, but hey it's *well* worth the small amount of time necessary to start stuff up. Regards to all, -Colin