From: Richard Basch (basch@mit.edu)
Date: Sun Jan 14 2007 - 06:07:07 EST
Apparently, Solaris 10 uses a new version of NFS that employs new security
semantics that restricts the use of symlinks in client mount requests. A
client must specify the exact path on the server rather than a path that
employs a symlink during a mount. This differs from the Solaris 9 or NFS v3
semantics. How can I restore the old semantics, particularly for JumpStart?
The following is in /etc/dfs/dfstab:
share -F nfs -o ro,anon=0 /usr/local/solaris/Solaris_10
share -F nfs -o ro /usr/local/jumpstart
Resulting in the following shares:
# share
- /data/solaris/Solaris_10 ro,anon=0 ""
- /data/jumpstart ro ""
As you can surmise, /usr/local/solaris and /usr/local/jumpstart are symlinks
to /data/solaris and /data/jumpstart respectively.
If a boot server contains the following /etc/bootparams, the JumpStart will
fail:
client1 root=server1:/usr/local/solaris/Solaris_10/Solaris_10/Tools/Boot
install=10.1.2.3:/usr/local/solaris/Solaris_10 boottype=:in
sysid_config=10.1.2.3:/usr/local/jumpstart/sysidcfg_dir/client1
install_config=10.1.2.3:/usr/local/jumpstart rootopts=:rsize=1024
Even if I change rootopts to "rootopts=:rsize=1024:vers=3", the Jumpstart
will fail, since rootopts is only apparently used for mounting the root
partition.
I was able to simulate the condition:
# mount 10.1.2.3:/usr/local/jumpstart /mnt; echo $?
Jan 14 05:58:35 client1 nfs: WARNING: NFS server initial call to 10.1.2.3
failed: No such file or directory
nfs mount: 10.1.2.3:/usr/local/jumpstart: No such file or directory
33
# mount -o vers=3 10.1.2.3:/usr/local/jumpstart /mnt; echo $?
0
# umount /mnt
# mount 10.1.2.3:/data/jumpstart /mnt; echo $?
0
# umount /mnt
Obviously, the problem has to do with v4 semantics with mountd with NFS v4
requests. Is there a way to configure Solaris 10 to allow the traversal of
symlinks for a client's v4 requests or another bootparam option that
specifies the install= and install_config= mounts be done using "vers=3"?
Thanks.
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:41:27 EDT