Re: VLAN+bridge problem [was: no network between jails and host with VNET on same interface]

2019-10-09 Thread Alexander Lunev via freebsd-net
07.10.2019 8:21, Alexander N. Lunev via freebsd-net пишет: I've tested with tcpdump, and here's what i found: > Host interfaces: > em0 up > vlan22 10.15.15.1/24 vlandev em0 vlan22 > epair0a - part of epair for jail foo > bridge0 addm epair0 addm em0 > Jail foo interfaces: > epair0b up (vnet in

Re: VLAN+bridge problem [was: no network between jails and host with VNET on same interface]

2019-10-04 Thread Alexander Lunev via freebsd-net
You can create an epair, add it to the bridge, and then vlan the epair successfully. I've had to do that myself. The problem is when you bridge this epair with physical interface (say, igb1) and try to send from epair's vlan interface to igb1's vlan. It's hard to test it on host without jails

Re: no network between jails and host with VNET on same interface

2019-09-27 Thread alexander lunev via freebsd-net
I have to add: if i configure same network (10.14.14.0/24) on jail0 interfaces in jails and igb1 on host, then host and jails can ping addresses in this network. But vlan interfaces in jail and on host (10.1.1.0/24) can't ping each other. ===  host =     [igb1

Re: NFSv4 without Kerberos

2019-08-16 Thread Alexander Lunev via freebsd-net
1 - setting the sysctls vfs.nfsd.enable_stringtouid=1 vfs.nfs.enable_uidtostring=1 Allows the uid/gid to be put in the Owner/Owner_group string as a number (ie "1001"). This avoids any need to run the nfsuserd if all mounts are sec=sys. This is now the default for

Re: NFSv4 without Kerberos [solved]

2019-08-16 Thread Alexander Lunev via freebsd-net
I've already tried in any order, it doesn't change anything. In any order mountd on server complain to attributes? Order in exports file don't matter, if there are no errors then any order will work. All FS on UFS? Yes. I found it: should be # mount_nfs -o nfsv4 10.101.0.1:/ /mnt and

Re: NFSv4 without Kerberos

2019-08-16 Thread Alexander Lunev via freebsd-net
In another place (11.2-R) i've already done NFSv4 mount where ubuntu mounts share from freebsd via nfsv4 with sec=sys without any problem, but here (11.3) i can't make it work - maybe the reason is that client is diskless and root mounted by NFSv3 from the same server? Are the directories you

Re: NFSv4 without Kerberos

2019-08-16 Thread Alexander Lunev via freebsd-net
/NFS -maproot=root -sec=krb5i V4: /NFS -sec=krb5i and this work ok for nfsv4 mount (mount -t nfsv4 host:/) May be order is important? I've already tried in any order, it doesn't change anything. In another place (11.2-R) i've already done NFSv4 mount where ubuntu mounts share from freebsd v

Re: NFSv4 without Kerberos

2019-08-16 Thread Alexander Lunev via freebsd-net
And add to exports: /mnt/v4share -sec=sys -network 10.101.0 -mask 255.255.255.0 It gives mountd error: bad exports list line '/mnt/v4share -sec' If I remove -sec=sys, then mountd errors in /var/log/messages: can't change attributes for /mnt/v4share: netcred already exists for given addr/mas

Re: NFSv4 without Kerberos

2019-08-16 Thread Alexander Lunev via freebsd-net
root@netboot_v4: ~# mount_nfs -o nfsvers=4 10.101.0.1:/mnt/v4share /var/mnt [tcp] 10.101.0.1:/mnt/v4share: Permission denied try `mount_nfs -o nfsvers=4 10.101.0.1:/ /var/mnt` Tried, same result: [tcp] 10.101.0.1:/: Permission denied In server logs: Aug 15 01:02:21 virt mountd[625]: mount re

NFSv4 without Kerberos

2019-08-16 Thread Alexander Lunev via freebsd-net
Hello everyone! I'm trying to build diskless system with some mounts done by NFSv4, and i can't figure out how to mount share without kerberos, with -sec=sys flavour. Doing all by handbook, on server i have: server's /etc/rc.conf (part of it): ifconfig_em1="inet 10.101.0.1/24" nfs_server_ena