From: Jukka Laaksola (jukka.laaksola_at_netland.fi)
Date: Wed 15 May 2002 - 21:27:41 BST
Hi there!
I am having a problem with vserver v0.17 and kernel 2.4.18ctx-10.
My vserver root has IP 10.10.10.35 and I have two virtual servers: v1 is
10.10.10.40 and v2 is 10.10.10.41. There is a second computer with IP
10.10.10.18. The goal is to get the NIS working between the virtual servers.
When I am having a NIS server on v1 and a NIS client on the second
computer everything works fine. But a NIS client on a virtual server
doesn't found the NIS server on other virtual server or on the second
computer.
Here is a Ethereal's capture when I am having NIS server on the second
computer, 10.10.10.18, and NIS client on v2, 10.10.10.41. Portmap
handling looks good, but the source IP changes to vserver root's IP on
YPSERV-protocol... Then NIS server doesn't answer anymore. wierd?
Ethereal capture:
Source Destination Protocol Info
----------- ----------- -------- ----
10.10.10.41 10.10.10.18 Portmap V2 GETPORT Call XID 0x6a4f3187
10.10.10.18 10.10.10.41 Portmap V2 GETPORT Reply XID 0x6a4f3187
10.10.10.41 10.10.10.18 Portmap V2 GETPORT Call XID 0x61709c74
10.10.10.18 10.10.10.41 Portmap V2 GETPORT Reply XID 0x61709c74
10.10.10.35 10.10.10.18 YPSERV V2 DOMAIN_NONACK Call XID 0x5e1ce23c
10.10.10.35 10.10.10.18 YPSERV V2 DOMAIN_NONACK Call XID 0x5f1ce23c
My v1.conf and v2.conf:
IPROOT=10.10.10.4x
IPROOTDEV=eth0
S_HOSTNAME=10.10.10.4x
S_DOMAINNAME=our_nis.domain
S_FLAGS="lock nproc"
ULIMIT="-H -u 1000"
S_CAPS="CAP_SYS_RESOURCE CAP_NET_RAW CAP_NET_BIND_SERVICE"
I have tried every CAP_NET_* combination in the S_CAPS, but nothing works..
And there is an other strange thing with IPs. I have NFSD on v1,
10.10.10.40, and I am mounting v1:/home on the vserver root,
10.10.10.35, over NFS it works ok. I can read and write NFSed directory.
But on the v1's log says:
mountd[6738]: NFS mount of /home attempted from 10.10.10.40
mountd[6738]: /home has been mounted by 10.10.10.40
There should be 10.10.10.35, right? That's not a big problem because NFS
works fine, but I think there might be a connection between these two
problems.
Many thanks
Jukka
-- Jukka Laaksola