NFS problems after OS updates - can't access directories

[Detlev Habicht]

Hello,

i am using IPA, NFS-services and CIFS on several server running Scientific Linux 7.

This morning a lot of IPA-Updates arrived for Scientific Linux.

My clients are running Fedora 25. 

Now i have a big problem:

- I am using automount and NFS4 and on my clients i see the directories i can mount.
  But when i am trying  to „cd“ to a directory, i see a message like can’t find file or
directory.

- Replication don’t work.

- Authentication is still working, but maybe this is done by caching.

- SMB/CIFS is also still working.

- I can destroy my user ticket and i can get a new one with kinit.


I am still no expert, so i want to know, what i can do to find the error.

How can i search the error? Where i find logs for this NFS mount problem?

Thanx for any help!

Greetings

Detlev 


P.S.:

---

My updates from today (only with „ipa“ in the name) on the IPA-Server:

Aug 22 08:11:14 Updated: ipa-common.noarch 4.5.0-21.sl7
Aug 22 08:11:58 Updated: ipa-client-common.noarch 4.5.0-21.sl7
Aug 22 08:12:23 Updated: libipa_hbac.x86_64 1.15.2-50.el7
Aug 22 08:12:25 Updated: python-libipa_hbac.x86_64 1.15.2-50.el7
Aug 22 08:12:50 Updated: python2-ipalib.noarch 4.5.0-21.sl7
Aug 22 08:12:50 Updated: python2-ipaclient.noarch 4.5.0-21.sl7
Aug 22 08:12:51 Updated: ipa-server-common.noarch 4.5.0-21.sl7
Aug 22 08:12:52 Updated: python2-ipaserver.noarch 4.5.0-21.sl7
Aug 22 08:12:55 Updated: sssd-ipa.x86_64 1.15.2-50.el7
Aug 22 08:12:57 Installed: ipa-client.x86_64 4.5.0-21.sl7
Aug 22 08:13:34 Updated: ipa-server.x86_64 4.5.0-21.sl7
Aug 22 08:14:37 Updated: ipa-server-dns.noarch 4.5.0-21.sl7
Aug 22 08:14:50 Updated: ipa-python-compat.noarch 4.5.0-21.sl7
Aug 22 08:15:51 Erased: ipa-admintools

---

The same with sssd on the IPA-Server:

Aug 22 08:11:14 Updated: libsss_idmap.x86_64 1.15.2-50.el7
Aug 22 08:11:54 Updated: python-sssdconfig.noarch 1.15.2-50.el7
Aug 22 08:11:55 Installed: libsss_certmap.x86_64 1.15.2-50.el7
Aug 22 08:12:24 Updated: libsss_nss_idmap.x86_64 1.15.2-50.el7
Aug 22 08:12:24 Updated: libsss_autofs.x86_64 1.15.2-50.el7
Aug 22 08:12:25 Updated: sssd-client.x86_64 1.15.2-50.el7
Aug 22 08:12:49 Updated: python-sss-murmur.x86_64 1.15.2-50.el7
Aug 22 08:12:55 Updated: libsss_sudo.x86_64 1.15.2-50.el7
Aug 22 08:12:55 Updated: sssd-common.x86_64 1.15.2-50.el7
Aug 22 08:12:55 Updated: sssd-krb5-common.x86_64 1.15.2-50.el7
Aug 22 08:12:55 Updated: sssd-common-pac.x86_64 1.15.2-50.el7
Aug 22 08:12:55 Updated: sssd-ipa.x86_64 1.15.2-50.el7
Aug 22 08:12:55 Updated: sssd-ad.x86_64 1.15.2-50.el7
Aug 22 08:12:55 Updated: sssd-ldap.x86_64 1.15.2-50.el7
Aug 22 08:12:56 Updated: sssd-krb5.x86_64 1.15.2-50.el7
Aug 22 08:12:56 Updated: sssd-proxy.x86_64 1.15.2-50.el7
Aug 22 08:12:56 Updated: sssd.x86_64 1.15.2-50.el7
Aug 22 08:12:57 Installed: sssd-dbus.x86_64 1.15.2-50.el7

---

A message from my replica problem:

Replication to sipa.ims.intern last operation 1970-01-01 00:00:00 Status: Error (18)
Replication error acquiring replica: Incremental update transient error.  Backing off,
will retry update later. (transient error).


Well, i see the date. But why i have this date in the message?





--
  Detlev  | Institut fuer Mikroelektronische Systeme
  Habicht | D-30167 Hannover [phone] habicht(a)ims.uni-hannover.de
  --------+-------- Handy    [phone]  ---------------------------

[Detlev Habicht]

Ok,

i will reduce my questions to one point:

I was using tcpdump on NFS server side.

When i am trying to go to a directory i can see, that the client connect the server.
But the server don’t answer. Not any packet …

So the server don’t react to the client.

So where can i find or how i can produce logs in the server?
Especially when my problem is a kerberos problem?

Thanx for any help.

Detlev

--
  Detlev  | Institut fuer Mikroelektronische Systeme
  Habicht | D-30167 Hannover [phone] habicht(a)ims.uni-hannover.de
  --------+-------- Handy    [phone]  ---------------------------



Am 22.08.2017 um 16:49 schrieb Detlev Habicht via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org&gt;:

>  Hello,
>  
>  i am using IPA, NFS-services and CIFS on several server running Scientific Linux 7.
>  
>  This morning a lot of IPA-Updates arrived for Scientific Linux.
>  
>  My clients are running Fedora 25. 
>  
>  Now i have a big problem:
>  
>  - I am using automount and NFS4 and on my clients i see the directories i can mount.
>    But when i am trying  to „cd“ to a directory, i see a message like can’t find file or
> directory.
>  
>  - Replication don’t work.
>  
>  - Authentication is still working, but maybe this is done by caching.
>  
>  - SMB/CIFS is also still working.
>  
>  - I can destroy my user ticket and i can get a new one with kinit.
>  
>  
>  I am still no expert, so i want to know, what i can do to find the error.
>  
>  How can i search the error? Where i find logs for this NFS mount problem?
>  
>  Thanx for any help!
>  
>  Greetings
>  
>  Detlev 
>  
>  
>  P.S.:
>  
>  ---
>  
>  My updates from today (only with „ipa“ in the name) on the IPA-Server:
>  
>  Aug 22 08:11:14 Updated: ipa-common.noarch 4.5.0-21.sl7
>  Aug 22 08:11:58 Updated: ipa-client-common.noarch 4.5.0-21.sl7
>  Aug 22 08:12:23 Updated: libipa_hbac.x86_64 1.15.2-50.el7
>  Aug 22 08:12:25 Updated: python-libipa_hbac.x86_64 1.15.2-50.el7
>  Aug 22 08:12:50 Updated: python2-ipalib.noarch 4.5.0-21.sl7
>  Aug 22 08:12:50 Updated: python2-ipaclient.noarch 4.5.0-21.sl7
>  Aug 22 08:12:51 Updated: ipa-server-common.noarch 4.5.0-21.sl7
>  Aug 22 08:12:52 Updated: python2-ipaserver.noarch 4.5.0-21.sl7
>  Aug 22 08:12:55 Updated: sssd-ipa.x86_64 1.15.2-50.el7
>  Aug 22 08:12:57 Installed: ipa-client.x86_64 4.5.0-21.sl7
>  Aug 22 08:13:34 Updated: ipa-server.x86_64 4.5.0-21.sl7
>  Aug 22 08:14:37 Updated: ipa-server-dns.noarch 4.5.0-21.sl7
>  Aug 22 08:14:50 Updated: ipa-python-compat.noarch 4.5.0-21.sl7
>  Aug 22 08:15:51 Erased: ipa-admintools
>  
>  ---
>  
>  The same with sssd on the IPA-Server:
>  
>  Aug 22 08:11:14 Updated: libsss_idmap.x86_64 1.15.2-50.el7
>  Aug 22 08:11:54 Updated: python-sssdconfig.noarch 1.15.2-50.el7
>  Aug 22 08:11:55 Installed: libsss_certmap.x86_64 1.15.2-50.el7
>  Aug 22 08:12:24 Updated: libsss_nss_idmap.x86_64 1.15.2-50.el7
>  Aug 22 08:12:24 Updated: libsss_autofs.x86_64 1.15.2-50.el7
>  Aug 22 08:12:25 Updated: sssd-client.x86_64 1.15.2-50.el7
>  Aug 22 08:12:49 Updated: python-sss-murmur.x86_64 1.15.2-50.el7
>  Aug 22 08:12:55 Updated: libsss_sudo.x86_64 1.15.2-50.el7
>  Aug 22 08:12:55 Updated: sssd-common.x86_64 1.15.2-50.el7
>  Aug 22 08:12:55 Updated: sssd-krb5-common.x86_64 1.15.2-50.el7
>  Aug 22 08:12:55 Updated: sssd-common-pac.x86_64 1.15.2-50.el7
>  Aug 22 08:12:55 Updated: sssd-ipa.x86_64 1.15.2-50.el7
>  Aug 22 08:12:55 Updated: sssd-ad.x86_64 1.15.2-50.el7
>  Aug 22 08:12:55 Updated: sssd-ldap.x86_64 1.15.2-50.el7
>  Aug 22 08:12:56 Updated: sssd-krb5.x86_64 1.15.2-50.el7
>  Aug 22 08:12:56 Updated: sssd-proxy.x86_64 1.15.2-50.el7
>  Aug 22 08:12:56 Updated: sssd.x86_64 1.15.2-50.el7
>  Aug 22 08:12:57 Installed: sssd-dbus.x86_64 1.15.2-50.el7
>  
>  ---
>  
>  A message from my replica problem:
>  
>  Replication to sipa.ims.intern last operation 1970-01-01 00:00:00 Status: Error (18)
> Replication error acquiring replica: Incremental update transient error.  Backing off,
> will retry update later. (transient error).
>  
>  
>  Well, i see the date. But why i have this date in the message?
>  
>  
>  
>  
>  
>  --
>    Detlev  | Institut fuer Mikroelektronische Systeme
>    Habicht | D-30167 Hannover [phone] habicht(a)ims.uni-hannover.de
>    --------+-------- Handy    [phone]  ---------------------------
>  
>  
>  
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org

[Rob Crittenden]

Detlev Habicht via FreeIPA-users wrote:
>  Ok,
>  
>  i will reduce my questions to one point:
>  
>  I was using tcpdump on NFS server side.
>  
>  When i am trying to go to a directory i can see, that the client connect
>  the server.
>  But the server don’t answer. Not any packet …
>  
>  So the server don’t react to the client.
>  
>  So where can i find or how i can produce logs in the server?
>  Especially when my problem is a kerberos problem? 
You'll find the kerberos logs on the IPA master(s) in /var/log/krb5kdc.log.

rob

>  
>  Thanx for any help.
>  
>  Detlev
>  
>  --
>    Detlev  | Institut fuer Mikroelektronische Systeme
>    Habicht | D-30167 Hannover +49 511
>  76219662 habicht(a)ims.uni-hannover.de <mailto:[e-mail]>
>    --------+-------- Handy    [phone]  ---------------------------
>  
>  
>  
>  Am 22.08.2017 um 16:49 schrieb Detlev Habicht via FreeIPA-users
>  <freeipa-users(a)lists.fedorahosted.org
>  <mailto:[e-mail]>>:
>  
> > Hello,
> >
> > i am using IPA, NFS-services and CIFS on several server running
> > Scientific Linux 7.
> >
> > This morning a lot of IPA-Updates arrived for Scientific Linux.
> >
> > My clients are running Fedora 25. 
> >
> > Now i have a big problem:
> >
> > - I am using automount and NFS4 and on my clients i see the
> > directories i can mount.
> >   But when i am trying  to „cd“ to a directory, i see a message like
> > can’t find file or directory.
> >
> > - Replication don’t work.
> >
> > - Authentication is still working, but maybe this is done by caching.
> >
> > - SMB/CIFS is also still working.
> >
> > - I can destroy my user ticket and i can get a new one with kinit.
> >
> >
> > I am still no expert, so i want to know, what i can do to find the error.
> >
> > How can i search the error? Where i find logs for this NFS mount problem?
> >
> > Thanx for any help!
> >
> > Greetings
> >
> > Detlev 
> >
> >
> > P.S.:
> >
> > ---
> >
> > My updates from today (only with „ipa“ in the name) on the IPA-Server:
> >
> > Aug 22 08:11:14 Updated: ipa-common.noarch 4.5.0-21.sl7
> > Aug 22 08:11:58 Updated: ipa-client-common.noarch 4.5.0-21.sl7
> > Aug 22 08:12:23 Updated: libipa_hbac.x86_64 1.15.2-50.el7
> > Aug 22 08:12:25 Updated: python-libipa_hbac.x86_64 1.15.2-50.el7
> > Aug 22 08:12:50 Updated: python2-ipalib.noarch 4.5.0-21.sl7
> > Aug 22 08:12:50 Updated: python2-ipaclient.noarch 4.5.0-21.sl7
> > Aug 22 08:12:51 Updated: ipa-server-common.noarch 4.5.0-21.sl7
> > Aug 22 08:12:52 Updated: python2-ipaserver.noarch 4.5.0-21.sl7
> > Aug 22 08:12:55 Updated: sssd-ipa.x86_64 1.15.2-50.el7
> > Aug 22 08:12:57 Installed: ipa-client.x86_64 4.5.0-21.sl7
> > Aug 22 08:13:34 Updated: ipa-server.x86_64 4.5.0-21.sl7
> > Aug 22 08:14:37 Updated: ipa-server-dns.noarch 4.5.0-21.sl7
> > Aug 22 08:14:50 Updated: ipa-python-compat.noarch 4.5.0-21.sl7
> > Aug 22 08:15:51 Erased: ipa-admintools
> >
> > ---
> >
> > The same with sssd on the IPA-Server:
> >
> > Aug 22 08:11:14 Updated: libsss_idmap.x86_64 1.15.2-50.el7
> > Aug 22 08:11:54 Updated: python-sssdconfig.noarch 1.15.2-50.el7
> > Aug 22 08:11:55 Installed: libsss_certmap.x86_64 1.15.2-50.el7
> > Aug 22 08:12:24 Updated: libsss_nss_idmap.x86_64 1.15.2-50.el7
> > Aug 22 08:12:24 Updated: libsss_autofs.x86_64 1.15.2-50.el7
> > Aug 22 08:12:25 Updated: sssd-client.x86_64 1.15.2-50.el7
> > Aug 22 08:12:49 Updated: python-sss-murmur.x86_64 1.15.2-50.el7
> > Aug 22 08:12:55 Updated: libsss_sudo.x86_64 1.15.2-50.el7
> > Aug 22 08:12:55 Updated: sssd-common.x86_64 1.15.2-50.el7
> > Aug 22 08:12:55 Updated: sssd-krb5-common.x86_64 1.15.2-50.el7
> > Aug 22 08:12:55 Updated: sssd-common-pac.x86_64 1.15.2-50.el7
> > Aug 22 08:12:55 Updated: sssd-ipa.x86_64 1.15.2-50.el7
> > Aug 22 08:12:55 Updated: sssd-ad.x86_64 1.15.2-50.el7
> > Aug 22 08:12:55 Updated: sssd-ldap.x86_64 1.15.2-50.el7
> > Aug 22 08:12:56 Updated: sssd-krb5.x86_64 1.15.2-50.el7
> > Aug 22 08:12:56 Updated: sssd-proxy.x86_64 1.15.2-50.el7
> > Aug 22 08:12:56 Updated: sssd.x86_64 1.15.2-50.el7
> > Aug 22 08:12:57 Installed: sssd-dbus.x86_64 1.15.2-50.el7
> >
> > ---
> >
> > A message from my replica problem:
> >
> > Replication to sipa.ims.intern last operation 1970-01-01 00:00:00
> > Status: Error (18) Replication error acquiring replica: Incremental
> > update transient error.  Backing off, will retry update later.
> > (transient error).
> >
> >
> > Well, i see the date. But why i have this date in the message?
> >
> >
> >
> >
> >
> > --
> >   Detlev  | Institut fuer Mikroelektronische Systeme
> >   Habicht | D-30167 Hannover +49 511
> > 76219662 habicht(a)ims.uni-hannover.de <mailto:[e-mail]>
> >   --------+-------- Handy    [phone]  ---------------------------
> >
> >
> >
> > _______________________________________________
> > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> > <mailto:[e-mail]>
> > To unsubscribe send an email to
> > freeipa-users-leave(a)lists.fedorahosted.org
> > <mailto:[e-mail]>
>  
>  
>  
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>