[Freeipa-users] FreeIPA for Linux desktop deployment

Mon May 16 12:08:59 UTC 2011

Thanks indeed for the reply!
I updated the autofs package with version 5.0.5-30.el6.i686 and that error is gone now. But still automounting is not happening. Following is the relevant portion of /var/log/messages in one of the IPA client machine(RHEL 6.1 beta) configured with --mkhomedir switch .
May 16 14:14:13 rhel automount[1787]: lookup_mount: lookup(ldap): looking up test1May 16 14:14:13 rhel automount[1787]: find_server: trying server uri ldap://192.168.1.240May 16 14:14:13 rhel automount[1787]: do_bind: lookup(ldap): auth_required: 1, sasl_mech (null)May 16 14:14:13 rhel automount[1787]: do_bind: lookup(ldap): ldap simple bind returned 0May 16 14:14:13 rhel automount[1787]: get_query_dn: lookup(ldap): check search base listMay 16 14:14:13 rhel automount[1787]: get_query_dn: lookup(ldap): found search base under cn=automount,dc=cohort,dc=orgMay 16 14:14:13 rhel automount[1787]: get_query_dn: lookup(ldap): found query dn automountmapname=auto.home,cn=default,cn=automount,dc=cohort,dc=orgMay 16 14:14:13 rhel automount[1787]: connected to uri ldap://192.168.1.240May 16 14:14:13 rhel automount[1787]: lookup_one: lookup(ldap): searching for "(&(objectclass=automount)(|(automountKey=test1)(automountKey=/)(automountKey=\2A)))" under
 "automountmapname=auto.home,cn=default,cn=automount,dc=cohort,dc=org"May 16 14:14:13 rhel automount[1787]: lookup_one: lookup(ldap): getting first entry for automountKey="test1"May 16 14:14:13 rhel automount[1787]: lookup_one: lookup(ldap): examining first entryMay 16 14:14:13 rhel automount[1787]: lookup_mount: lookup(ldap): test1 -> -fstype=nfs4,rw,sec=krb5,soft,rsize=8192,wsize=8192 hugayat.cohort.org:/xtra/home/&May 16 14:14:13 rhel automount[1787]: parse_mount: parse(sun): expanded entry: -fstype=nfs4,rw,sec=krb5,soft,rsize=8192,wsize=8192 hugayat.cohort.org:/xtra/home/test1May 16 14:14:13 rhel automount[1787]: parse_mount: parse(sun): gathered options: fstype=nfs4,rw,sec=krb5,soft,rsize=8192,wsize=8192May 16 14:14:13 rhel automount[1787]: parse_mount: parse(sun): dequote("hugayat.cohort.org:/xtra/home/test1") -> hugayat.cohort.org:/xtra/home/test1May 16 14:14:13 rhel automount[1787]: parse_mount: parse(sun): core of entry:
 options=fstype=nfs4,rw,sec=krb5,soft,rsize=8192,wsize=8192, loc=hugayat.cohort.org:/xtra/home/test1May 16 14:14:13 rhel automount[1787]: sun_mount: parse(sun): mounting root /home, mountpoint test1, what hugayat.cohort.org:/xtra/home/test1, fstype nfs4, options rw,sec=krb5,soft,rsize=8192,wsize=8192May 16 14:14:13 rhel automount[1787]: mount_mount: mount(nfs): root=/home name=test1 what=hugayat.cohort.org:/xtra/home/test1, fstype=nfs4, options=rw,sec=krb5,soft,rsize=8192,wsize=8192May 16 14:14:13 rhel automount[1787]: mount_mount: mount(nfs): nfs options="rw,sec=krb5,soft,rsize=8192,wsize=8192", nosymlink=0, ro=0May 16 14:14:13 rhel automount[1787]: mount_mount: mount(nfs): calling mkdir_path /home/test1May 16 14:14:13 rhel automount[1787]: mount_mount: mount(nfs): calling mount -t nfs4 -s -o rw,sec=krb5,soft,rsize=8192,wsize=8192 hugayat.cohort.org:/xtra/home/test1 /home/test1May 16 14:14:13 rhel automount[1787]: >> mount.nfs4: mounting
 hugayat.cohort.org:/xtra/home/test1 failed, reason given by server:May 16 14:14:13 rhel automount[1787]: >>   No such file or directoryMay 16 14:14:13 rhel automount[1787]: mount(nfs): nfs: mount failure hugayat.cohort.org:/xtra/home/test1 on /home/test1May 16 14:14:13 rhel automount[1787]: dev_ioctl_send_fail: token = 47May 16 14:14:13 rhel automount[1787]: failed to mount /home/test1

Please note the following points,
   -- All the configuration you had suggested for autofs & nsswitch had already been done   -- My NFS server is another IPA client machine with RHEL 6.1(hugayat.cohort.org)   -- This NFS server has /xtra/home/ as the NFS partition and /etc/exports file as follows
/xtra/home  *(rw,fsid=0,insecure,no_subtree_check)/xtra/home  gss/krb5(rw,fsid=0,insecure,no_subtree_check)/xtra/home  gss/krb5i(rw,fsid=0,insecure,no_subtree_check)/xtra/home  gss/krb5p(rw,fsid=0,insecure,no_subtree_check)
   -- Output of the command  ipa automountlocation-tofiles default
/etc/auto.master:/-      /etc/auto.direct/home   /etc/auto.home/share  /etc/auto.share---------------------------/etc/auto.direct:---------------------------/etc/auto.home:*       -fstype=nfs4,rw,sec=krb5,soft,rsize=8192,wsize=8192 hugayat.cohort.org:/xtra/home/&---------------------------/etc/auto.share:
I have played various entries corresponding to /etc/auto.home (like /home instead of * ) but with no success.
Any idea ?
Regards,Nidal

--- On Mon, 5/16/11, Jakub Hrozek <jhrozek at redhat.com> wrote:

From: Jakub Hrozek <jhrozek at redhat.com>
Subject: Re: [Freeipa-users] FreeIPA for Linux desktop deployment
To: freeipa-users at redhat.com
Date: Monday, May 16, 2011, 1:23 AM

On 05/15/2011 06:49 AM, nasir nasir wrote:
> Thanks again!
> 
> NO, it was not set. I added it manually now (*automount:  ldap *) and
> now a different error pops up in /var/log/messages while restarting
> autofs service,
> 
> *May 15 06:32:04 hugayat automount[16256]: open_lookup:90: cannot open
> lookup module ldap (/usr/lib/autofs/lookup_ldap.so: undefined symbol:
> ERR_remove_state)*
> *May 15 06:32:04 hugayat automount[16256]: lookup_nss_read_master:
> auto.master not found, replacing '.' with '_'*
> *May 15 06:32:04 hugayat automount[16256]: open_lookup:90: cannot open
> lookup module ldap (/usr/lib/autofs/lookup_ldap.so: undefined symbol:
> ERR_remove_state)*
> *May 15 06:32:04 hugayat automount[16256]: no mounts in table*
> 
> Quick googling shows that it was part of a bug in earlier version of
> autofs(5.0.3) but later fixed. Mine is autofs *autofs-5.0.5-29.el6.i686*
> *
> *
> Also, the symbol *ERR_remove_state *is part of openssl right ? following
> is my output of ldd command of lookup_ldap.so,

I think you ran into https://bugzilla.redhat.com/show_bug.cgi?id=579963

The ERR_remove_state call was removed in autofs-5.0.5-30.el6. I did a
quick test with that version and seemed to work fine.

As per the configuration, the necessary steps are:
1) edit /etc/nsswitch.conf and put "automount: ldap". It is also OK to
configure more sources such as "automount: files ldap".

2) edit /etc/sysconfig/autofs
You'll want to specify at least LDAP_URI and SEARCH_BASE according to
your server environment. In order for the correct attributes to be
searched for, you also need to uncomment the last set of attribute mappings:

MAP_OBJECT_CLASS="automountMap"
ENTRY_OBJECT_CLASS="automount"
MAP_ATTRIBUTE="automountMapName"
ENTRY_ATTRIBUTE="automountKey"
VALUE_ATTRIBUTE="automountInformation"

3) service autofs restart

If things still don't work, the logs should tell us more. If you run
autofs with -v -d it would even list the exact mount invocation, which
could be useful to determine the exact problem.

-----Inline Attachment Follows-----

_______________________________________________
Freeipa-users mailing list
Freeipa-users at redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20110516/3b9b3718/attachment-0001.htm>