NFS issue.

I have an NFS issue.

The server side (openSUSE 12.3) has this definition:

/etc/exports (lines wrapped for clarity on post, single line on real file):


> /data/storage_c/repositorios_zypp/                      	\
>      192.168.1.0/24(fsid=1234,rw,no_root_squash,nohide,no_subtree_check,insecure)   \
>      172.16.108.0/24(fsid=1234,rw,no_root_squash,nohide,no_subtree_check,insecure)  \
>      192.168.74.0/24(fsid=1234,rw,no_root_squash,nohide,no_subtree_check,insecure)  \
>      127.0.0.1(fsid=1234,rw,no_root_squash,nohide,no_subtree_check,insecure)        \
>
::1(fsid=1234,rw,no_root_squash,nohide,no_subtree_check,insecure)

I have it working on a 12.3 guest inside vmware player (the server
machine (host) runs vmplayer) with this fstab entry:


> telcontar.valinor:/data/storage_c/repositorios_zypp     /var/cache/zypp/nfs_packages    nfs4    defaults 0 0

And I have it working with this other fstab entry in localhost on the
server:


> localhost:/data/storage_c/repositorios_zypp/    /mnt/nfs/tmp      nfs     defaults   0 0

Notice that localhost IS using IPv6, which is why I declared ::1 in the
exports file. I found that out by issuing “mount -v” command:


Telcontar:~ # mount -v /mnt/nfs/tmp
mount.nfs: timeout set for Thu Jul 11 13:41:22 2013
mount.nfs: trying text-based options 'vers=4,addr=::1,clientaddr=::1'
Telcontar:~ #

But it fails on the laptop, using openSUSE 11.4. It has this fstab
entry, which was working when the server was 12.1:


> 192.168.1.14:/data/storage_c/repositorios_zypp/ /var/cache/zypp/nfs_packages nfs  defaults,noauto,_netdev,nfsvers=4  0 0

which I have today changed to


> 192.168.1.14:/data/storage_c/repositorios_zypp/ /var/cache/zypp/nfs_packages nfs  defaults,noauto 0 0

A manual attempt fails:


> minas-tirith:~ # date --rfc-3339=seconds ; time mount -v /var/cache/zypp/nfs_packages/ ; date --rfc-3339=seconds ; ls
> 2013-07-12 09:46:25+02:00
> mount.nfs: timeout set for Fri Jul 12 09:48:25 2013
> mount.nfs: trying text-based options 'vers=4,addr=192.168.1.14,clientaddr=192.168.1.129'
> mount.nfs: mount(2): Connection timed out
> mount.nfs: Connection timed out
>
> real    3m0.270s
> user    0m0.003s
> sys     0m0.001s
> 2013-07-12 09:49:26+02:00
> .ICEauthority    .gtk-bookmarks  .pulse               .xauth4LwyWm  .xauthGmAFIi  .xauthZcVVsV  .xauths4lkgR          Videos
....
> minas-tirith:~ #

The network packet is accepted on the server firewall:


> <0.4> 2013-07-12 09:47:27 Telcontar kernel - - - [529134.809075] SFW2-INext-ACC-TRUST IN=eth0 OUT= MAC=00:21:85:16:2d:0b:0c:ee:e6:d7:bb:5f:08:00 SRC=192.168.1.129 DST=192.168.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=11826 DF PROTO=TCP SPT=705 DPT=2049 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B40402080A032F6FDD0000000001030306)

And I see in iptraf (client) that the packet goes out (305 bytes) but
gets no response from the server (0 bytes). The server does not even
accept the network connection attempt.


Telcontar:~ # cat /etc/hosts.allow | egrep -v "^:space:]]*$|^#"
Telcontar:~ # cat /etc/hosts.deny | egrep -v "^:space:]]*$|^#"
http-rman : ALL EXCEPT LOCAL
Telcontar:~ #

Why? What should I look at that could be blocking or not accepting the
connection request on the server?


Cheers / Saludos,

Carlos E. R.
(from 12.3 x86_64 “Dartmouth” at Telcontar)

On 2013-07-12 10:03, Carlos E. R. wrote:

> Why? What should I look at that could be blocking or not accepting the
> connection request on the server?

Forcing the laptop to use nfs version 3, works. Which is a regression,
because when the server was 12.1, it worked using nfs 4…

new fstab entry:


> 192.168.1.14:/data/storage_c/repositorios_zypp/         /var/cache/zypp/nfs_packages    nfs     defaults,noauto,_netdev,nfsvers=3       0 0


> minas-tirith:~ # date --rfc-3339=seconds ; time mount -v /var/cache/zypp/nfs_packages/ ; date --rfc-3339=seconds
> 2013-07-12 18:45:58+02:00
> mount.nfs: timeout set for Fri Jul 12 18:47:58 2013
> Starting rpc.statd ...                                                                                                                        done
> mount.nfs: trying text-based options 'nfsvers=3,addr=192.168.1.14'
> mount.nfs: prog 100003, trying vers=3, prot=6
> mount.nfs: portmap query retrying: RPC: Timed out
> mount.nfs: prog 100003, trying vers=3, prot=17
> mount.nfs: trying 192.168.1.14 prog 100003 vers 3 prot UDP port 2049
> mount.nfs: prog 100005, trying vers=3, prot=17
> mount.nfs: trying 192.168.1.14 prog 100005 vers 3 prot UDP port 35298
> 192.168.1.14:/data/storage_c/repositorios_zypp/ on /var/cache/zypp/nfs_packages type nfs (rw,noauto,_netdev,nfsvers=3)
>
> real    0m10.665s
> user    0m0.025s
> sys     0m0.022s
> 2013-07-12 18:46:09+02:00
> minas-tirith:~ # ls /var/cache/zypp/nfs_packages/
> 11_2  11_4  12_2  Karlos Arguiñano en tu cocina (20110617) - Q9.480*384.xvid.avi  notas   se_montan_en_var_cache_zypp_packages
> 11_3  12_1  12_3  NO_BORRAR__son_cruciales                                        notas~
> minas-tirith:~ #

Server firewall - the timestamps show as seconds after the successful
connection above:


> <0.4> 2013-07-12 18:47:00 Telcontar kernel - - - [545893.615083] SFW2-INext-ACC-RPC IN=eth0 OUT= MAC=00:21:85:16:2d:0b:0c:ee:e6:d7:bb:5f:08:00 SRC=192.168.1.129 DST=192.168.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=6373 DF PROTO=TCP SPT=37124 DPT=111 WINDOW=14600 RES=0x00 SYN URGP=0 OPT (020405B40402080A038369F80000000001030306)
> <0.4> 2013-07-12 18:47:10 Telcontar kernel - - - [545903.618975] SFW2-INext-ACC-RPC IN=eth0 OUT= MAC=00:21:85:16:2d:0b:0c:ee:e6:d7:bb:5f:08:00 SRC=192.168.1.129 DST=192.168.1.14 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=37133 DF PROTO=UDP SPT=48994 DPT=111 LEN=64
> <0.4> 2013-07-12 18:47:10 Telcontar kernel - - - [545903.621093] SFW2-INext-ACC-RPC IN=eth0 OUT= MAC=00:21:85:16:2d:0b:0c:ee:e6:d7:bb:5f:08:00 SRC=192.168.1.129 DST=192.168.1.14 LEN=68 TOS=0x00 PREC=0x00 TTL=64 ID=37135 DF PROTO=UDP SPT=43429 DPT=2049 LEN=48
> <0.4> 2013-07-12 18:47:11 Telcontar kernel - - - [545903.626374] SFW2-INext-ACC-RPC IN=eth0 OUT= MAC=00:21:85:16:2d:0b:0c:ee:e6:d7:bb:5f:08:00 SRC=192.168.1.129 DST=192.168.1.14 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=37140 DF PROTO=UDP SPT=37107 DPT=111 LEN=64
> <0.4> 2013-07-12 18:47:11 Telcontar kernel - - - [545903.629035] SFW2-INext-ACC-RPC IN=eth0 OUT= MAC=00:21:85:16:2d:0b:0c:ee:e6:d7:bb:5f:08:00 SRC=192.168.1.129 DST=192.168.1.14 LEN=68 TOS=0x00 PREC=0x00 TTL=64 ID=37143 DF PROTO=UDP SPT=55214 DPT=35298 LEN=48
> <0.4> 2013-07-12 18:47:11 Telcontar kernel - - - [545903.651316] SFW2-INext-ACC-RPC IN=eth0 OUT= MAC=00:21:85:16:2d:0b:0c:ee:e6:d7:bb:5f:08:00 SRC=192.168.1.129 DST=192.168.1.14 LEN=68 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=700 DPT=35298 LEN=48
> <0.4> 2013-07-12 18:47:11 Telcontar kernel - - - [545903.688711] SFW2-INext-ACC-RPC IN=eth0 OUT= MAC=00:21:85:16:2d:0b:0c:ee:e6:d7:bb:5f:08:00 SRC=192.168.1.129 DST=192.168.1.14 LEN=116 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=53972 DPT=111 LEN=96
> <0.4> 2013-07-12 18:50:18 Telcontar kernel - - - [546091.536368] SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC=00:21:85:16:2d:0b:f8:1a:67:91:f4:22:08:00 SRC=175.139.234.50 DST=192.168.1.14 LEN=78 TOS=0x00 PREC=0x00 TTL=113 ID=31644 PROTO=UDP SPT=25953 DPT=20725 LEN=58



Cheers / Saludos,

Carlos E. R.
(from 12.3 x86_64 “Dartmouth” at Telcontar)