<div dir="ltr">Hi,<div><br></div><div>I didn't know it was only possible to create home on the home nfs server :)</div><div>I changed my implementation on home nfs server to make a flat /home directory (not mounted with autofs from an other directory of the same server)</div><div><br></div><div>2) is now solved: I disabled autofs on the home nfs server, moved files and mkhomedir now works perfectly.</div><div><br></div><div>1) the issue seems to be solved after this, but not instantaneously. I still see errors on NFS server logs:</div><div><span style="font-size:12.8000001907349px"> WARNING: can't create tcp rpc_clnt to server <ipa-server> for user with uid 0: RPC: Remote system error - No route to host </span></div><div><span style="font-size:12.8000001907349px">but it seems to be working. After creating a new user, I had to wait a few seconds/minutes for home to be fetchable by autofs.</span></div><div><span style="font-size:12.8000001907349px"><br></span></div><div>Thanks a lot.</div><div class="gmail_extra"><br clear="all"><div><div><font face="arial, helvetica, sans-serif"><div><span style="font-family:arial"><font face="arial, helvetica, sans-serif"><div>--</div><div><font color="#666666">Youenn Piolet</font></div><div><font size="1" color="#999999"><a href="mailto:piolet.y@gmail.com" target="_blank">piolet.y@gmail.com</a></font></div><div style="font-size:large"><span style="font-size:small"><span style="font-family:arial"><div><font face="tahoma, sans-serif"><span style="font-family:arial,verdana,tahoma,sans-serif;font-size:11px"><span style="font-family:tahoma,sans-serif;font-size:small"><font color="#666666"><span style="color:rgb(142,142,142);font-family:arial,verdana,tahoma,sans-serif;font-size:11px"><em><br></em></span></font></span></span></font></div><font color="#8E8E8E" face="arial, verdana, tahoma, sans-serif"></font></span><font color="#8E8E8E" face="arial, verdana, tahoma, sans-serif"></font><font color="#8E8E8E" face="arial, verdana, tahoma, sans-serif"></font></span></div></font></span></div></font></div></div> <br><div class="gmail_quote">2015-08-14 7:14 GMT+02:00 Prasun Gera <span dir="ltr"><<a href="mailto:prasun.gera@gmail.com" target="_blank">prasun.gera@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Where are you trying to create the home directories ? Is your NFS server the same as the IPA server ? You can only create home directories on the NFS home server unless the nfs-client sees the export option "no_root_squash". That is not recommended though. </div><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Thu, Aug 13, 2015 at 9:49 AM, Youenn PIOLET <span dir="ltr"><<a href="mailto:piolet.y@gmail.com" target="_blank">piolet.y@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">Hi,<div><br></div><div>I'm currently trying to configure automount for home directories with Kerberized NFSv4.</div><div>I'm struggling with two issues that may or may not be related:</div><div><br></div><div>1) Can't read my home directory. I have to type kinit manually first on each integrated client for this to work. I think it is related to the latest versions of sssd on Centos 7 / Fedora 21 (1.12.2-58), ipa of maybe nss, a 1 or 2 months outdate centos was working first and got broken after an update.<br></div><div><br></div><div>2) Can't create home directories for new users : Permission denied for oddjob-mkhomedir script. I can also experience this as root : can't mkdir /home/someuser, permission denied (see my mount chain in freeipa below). Related to NFSv4?</div><div><br></div><div><div>Here is my setup and various information:</div><div>- I'm not using selinux</div><div>- Exports : </div><div> /home.shared *(rw,sec=krb5:krb5i:krb5p)<br></div><div>- Mount chain : </div><div> * -fstype=nfs4,sec=krb5i,rw,proto=tcp,port=2049,rsize=8192,wsize=8192 home01.net:/home.shared/&</div><div>- Experienced on Centos 7 and Fedora 21</div><div>- FreeIPA server 4.1.4<br></div><div>- I used ipa-client-automount on clients and server.<br></div><div>- Same behavior with/without a dedicated service principal on client</div><div>- Some errors in NFS server logs : </div><div> rpc.gssd - WARNING: can't create tcp rpc_clnt to server <ipa-server> for user with uid 0: RPC: Remote system error - No route to host <-- at different times</div><div> oddjobd: Error org.freedesktop.DBus.Error.SELinuxSecurityContextUnknown: Could not determine security context for '1:<###>' <-- before oddjob-mkhomedir on new user</div><div><br></div><div>Have you got the same problems and did you manage to fix them?</div><div><br></div><div>Thanks by advance,</div><div><span style="font-family:arial,helvetica,sans-serif">--</span><br></div></div><div><div><div><font face="arial, helvetica, sans-serif"><span style="font-family:arial"><font face="arial, helvetica, sans-serif"><div><font color="#666666">Youenn Piolet</font></div><div><font size="1" color="#999999"><a href="mailto:piolet.y@gmail.com" target="_blank">piolet.y@gmail.com</a></font></div><div style="font-size:large"><span style="font-size:small"><span style="font-family:arial"><div><font face="tahoma, sans-serif"><span style="font-family:arial,verdana,tahoma,sans-serif;font-size:11px"><span style="font-family:tahoma,sans-serif;font-size:small"><font color="#666666"><span style="color:rgb(142,142,142);font-family:arial,verdana,tahoma,sans-serif;font-size:11px"><em><br></em></span></font></span></span></font></div><font color="#8E8E8E" face="arial, verdana, tahoma, sans-serif"></font></span><font color="#8E8E8E" face="arial, verdana, tahoma, sans-serif"></font><font color="#8E8E8E" face="arial, verdana, tahoma, sans-serif"></font></span></div></font></span></font></div></div> </div></div> <br></div></div><span><font color="#888888">--<br> Manage your subscription for the Freeipa-users mailing list:<br> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project<br></font></span></blockquote></div><br></div> </blockquote></div><br></div></div>