NFS client question ... do I need rpc?

Hi All!
I am in the process of doing some security auditing and in the process I came across open rpc ports that I believe I don't actually need. I would like to solicit thoughts on this:
I have solaris 8 and 10 machines importing NFS filesystems from a solaris 8 server. For the client machines, is there any reason to have rpc running?
I tested this with a solaris 8 machine, turned off both lockd/statd (/etc/init.d/nfs.client stop) and rpc (/etc/init.d/rpc stop), made sure that the daemons were not running and tried to nfsmount a share on the client:
mount -F nfs server:/share /mnt/tmp
which seemed to work fine. So do I need lockd/statd and rpc or not?
Rudolf

As I said, I tested the ability to connect to NFS even in the absence of rpc / lockd / statd on the client. However, it seems mAbrante is right about these services being at least advisable on the client to allow file locking. This is an excerpt from the lockd manpage that I should have spotted before even asking this question:
State information kept by the lock manager about these locking requests can be lost if the lockd is killed or the operating system is rebooted. Some of this information can be recovered as follows. When the server lock manager restarts, it waits for a grace period for all client-site lock managers to submit reclaim requests. Client-site lock managers, on the other hand, are notified by the status monitor daemon, statd(1M), of the restart and promptly resubmit previously granted lock requests. If the lock daemon fails to secure a previously granted lock at the server site, then it sends SIGLOST to a process.
So I guess you don't need the rpc / lockd / statd but you will lose functionality ... you might be able to get away with it if the exported filesystem is read only ...
Rudolf

Similar Messages

  • Ports needed for a nfs client

    Hello -
    Which ports on a firewall running on a solaris 10 machine should I open to make it a nfs client? I openned udp/tcp port 111. But it didn't work. The file server is running solaris 9.
    Thanks
    Rui

    If you use the WebNFS feature of Solaris it will only require port 2049, to use WebNFS, simply mount your NFS share as an URI.
    For example, replace:
    mount server:/share /mountpoint
    with
    mount nfs://server/share /mountpoint
    .. to use WebNFS instead.
    .7/M.

  • NFS client test program

    I'm trying to write a test program that behaves like an NFS client. The code uses the standard RPC calls to talk to the NFS server. It compiles and runs fine on Linux. On Solaris though I have a problem establishing an RPC client initially.
    The test program performs the following operations:
    1. Uses the portmapper service on the server to establish the remote port associated with the MOUNT service
    1. Creates a socket, sockfd.
    2. Uses bindresvport to bind a reserved port to the socket. The port number is in the reserved range (ie 600 to 1000ish).
    3. Connects this socket to the server
    3. Creates a struct sockadd_in with the appropriate address information for the server in addr
    4. Calls clnttcp_create
    The following code
    client = clnttcp_create(addr, <------- points at the server
    program, <-------- MOUNT RPC program number
    program_version, <--------- MOUNT RPC program version
    &sockfd, <------- connected socket using a reserved port on the local client
    0,
    0);
    if (client == NULL) {
    clnt_pcreateerror("clnttcp_create");
    returns "clnttcp_create: RPC: Remote system error - Address already in use".
    So it looks like port 688 (the local port selected say by bindresvport) is already in use ? But that's the whole point, I need to provide cnttcp_create() with a socket that already has a port bound to it.
    The same code runs fines on a Suse 11 client talking to Open Solaris 11 server. The same code run as a client on Solaris 11 fails with the above message when talking to either a Suse 11 server or a Solaris 11 server.
    Any suggestions what I'm doing wrong? Is this the right forum in which to ask?
    many thanks

    Make sure you have the sub-folder com, and then another sub-folder underneath it, mastertech and another sub-folder underneath this called sample. This is how packages are structured. They should be in your ep workspace directory structure if you're using Eclipse. In JBoss, you do not have to have the packages or any source code structure. Just jar your compiled code and save in JBoss's deploy folder which only accepts jar's, war's and ear's.

  • ASA VPN client question

    Hello.
    I have a question about a connection between an asa5505-sec-bun-k9 (that acts as Easy VPN client) and a EASY VPN server.
    The connection with the Easy VPN server is OK but I cannot more connect to internet and create VPN connections to my ASA5505 when I enable the feature.
    Is this a normal condition with Easy VPN Client enabled?

    u need to do split tunneling on ur vpn server and apply it to the vpn client config on the vpn server that encypt only traffic destined to the server side pravite network
    lets say the private network behind the vpn server is 192.168.1.0/24
    so make a standard ACL
    access-list split standard permit 192.168.1.0 255.255.255.0
    group-policy [ur grop policy name] attributes
    split-tunnel-policy tunnelspecified
    split-tunnel-network-list value split
    then when u connect from the easy client only traffic to 192.168.1.0 will go through the tunnel other traffic will not be part of encrypted traffic
    good luck
    Rate if helpful

  • [Solved]NFS Client Not Mounting Shares

    Here is my setup:
    I have two Arch boxes that I am attempting to setup NFS shares on.  The box that is going to be the server is headless FYI.  So far, I have installed nfs-utils, started `rpc-idmapd` and `rpc-mountd` successfully on the server, and started `rpc-gssd` successfully on the client.
    The folder I am trying to share is the /exports folder.
    ls -l /exports
    produces
    total 8
    drwxrwxrw-+ 110 daniel 1004 4096 Dec 6 17:26 Movies
    drwxrwxrwx+ 13 daniel users 4096 Jan 8 19:12 TV-Shows
    On the server:
    /etc/exports
    # /etc/exports
    # List of directories exported to NFS clients. See exports(5).
    # Use exportfs -arv to reread.
    # Example for NFSv2 and NFSv3:
    # /srv/home hostname1(rw,sync) hostname2(ro,sync)
    # Example for NFSv4:
    # /srv/nfs4 hostname1(rw,sync,fsid=0)
    # /srv/nfs4/home hostname1(rw,sync,nohide)
    # Using Kerberos and integrity checking:
    # /srv/nfs4 gss/krb5i(rw,sync,fsid=0,crossmnt)
    # /srv/nfs4/home gss/krb5i(rw,sync,nohide)
    /exports 192.168.1.10(rw,fsid=0)
    On the client:
    showmount -e 192.168.1.91
    Export list for 192.168.1.91:
    /exports 192.168.1.10
    Everything is looking hunky-dory.  However, I go to mount using
    sudo mount -t nfs4 192.168.1.91:/exports /mnt/Media
    and the mount never takes place.  It sits there and does nothing.  I CAN, however, kill the process with Ctrl-c.
    So does anybody have ANY idea why my shares aren't working.
    EDIT: Just thought I should mention that all of the data in the /exports folder is a mount --bind from /mnt/media.  All of the /mnt/media is contained on a USB external hard drive.  I did notice that there is an ACL.
    getfacl /exports
    getfacl: Removing leading '/' from absolute path names
    # file: exports/
    # owner: root
    # group: root
    user::rwx
    group::r-x
    other::r-x
    Last edited by DaBungalow (2014-01-10 03:18:05)

    I found what the problem was.  Apparently rpc_gssd was causing a problem.  Stopping it fixed everything.

  • How to config nfs client in netware 6 SP5

    Hello, I'm with some problems to find some information. It becomes difficult to find on a system already without support. I need to access an NFS from NetWare 6 SP5, and the truth can not find anything, so some links are broken. Anyone have any idea.

    The NFS documentation for NetWare 6.0 can be found:
    Novell Documentation: NetWare 6 - Working with UNIX Machines
    Now this is about th eNFS service.
    From your message title, are you talking about connecting a NFS client to a NetWare server, or about using NetWare as an NFS client? In the later case, you would need tu purchase an extra product callled NetWare NFS gateway.

  • Problems enabling nfs client and server

    I just re-build a solaris 11.1x86 on a x4640 SunFire
    Have problems enabling nfs
    First i typed the following command:
    # svcs network/nfs/server
    disable
    Second I typed the following command:
    #svcadm enable network/nfs/server
    # svcs network/nfs/server
    offline
    did this 3 or 4 times without success...
    any ideas?
    I holding production here! Please help!!

    Let's rule out the easier stuff first...
    Do you have something shared?
    I think you need to have something shared before you can enable the nfs server service.
    Or, if you share something, the service is started automatically. See below.
    Thanks, Cindy
    # svcs -a | grep nfs
    disabled Feb_26 svc:/network/nfs/client:default
    disabled Feb_26 svc:/network/nfs/server:default
    disabled Feb_26 svc:/network/nfs/rquota:default
    # svcadm enable svc:/network/nfs/server:default
    # svcs | grep nfs
    disabled 13:51:52 svc:/network/nfs/server:default
    # zfs set share.nfs=on rpool/cindy
    # share
    rpool_cindy /rpool/cindy nfs sec=sys,rw
    # svcs | grep nfs
    online Feb_26 svc:/network/nfs/fedfs-client:default
    online Feb_27 svc:/network/nfs/status:default
    online Feb_27 svc:/network/nfs/cbd:default
    online Feb_27 svc:/network/nfs/mapid:default
    online Feb_27 svc:/network/nfs/nlockmgr:default
    online 13:52:35 svc:/network/nfs/rquota:default
    online 13:52:35 svc:/network/nfs/server:default

  • Systemd nfs client mount share ???

    Just installed systemd, systemd-arch-units and initscripts-systemd  as per the wiki and all went well except mounting a nfs share from my server. (networking is OK!)
    This is the old working mount command run from rc.local before installing systemd;
    mount -t nfs4 -o rw,hard,async,intr,rsize=49152,wsize=49152,proto=tcp 192.168.0.250:/ /media/SERVER_NYTT &
    Did not mount at all with systemd, not even when run manually from command line. From systemd log netfs and nfs-common failed to start.
    So I tried from fstab instead;
    192.168.0.250:/ /media/SERVER_NYTT nfs rw,hard,async,intr,rsize=49152,wsize=49152,proto=tcp 0 0
    This did work but 'mount' showed that systemd had mounted with nfs default options instead of mine (wsize, rsize ...). Still errors from systemd starting netfs and nfs.
    So I disabled netfs and nfs-common/rpcbind from rc.conf and created this systemd file (/etc/systemd/system/192.168.0.250.mount);
    [Unit]
    Description=ServerNfs
    Wants=network.target rpc-statd.service
    After=network.target rpc-statd.service
    [Mount]
    What=192.168.0.250:/
    Where=/media/SERVET_NYTT
    Type=nfs
    Options=rw,hard,async,intr,rsize=49152,wsize=49152,proto=tcp
    DirectoryMode=0777
    StandardOutput=syslog
    StandardError=syslog
    From the sparce wiki and 'man systemd.mount'. Now nothing happens. With my limited understanding I thought it would start neccessary services (wants) and replace the entry in fstab.
    I will now enable systemd services rpcbind, rpcstatd and see what happens.
    Overall the transition to systemd went very well indeed; slim, openbox, network, .xinitrc, e4rat all started OK much to my surprise! There's still some fine-tuning to do like nfs, and possibly automounting and at last weeding out unneccessary services.
    But any help with this nfs client problem is much appreciated.

    swanson wrote:
    Do you use any of this;
    Alternatively, you can mark these entries in /etc/fstab with the x-systemd.automount and x-systemd-device-timeout= options (see systemd.mount ..
    I did read the man for systemd.mount but couldn't make out what to put in the fstab line.
    By the way, I renamed the mountfile to the target mountpoint but no success. I then reactivated the fstab line, with the new mountpoint in /mnt and that worked fine with mount -a. Except the mount options are not as I want, as they are in fstab. They were before systemd, and now they are as default for nfs4.
    have a look here regarding the x-systemd-automount option. I seem to be only one who has noticed a problem with this option, comment=systemd.automount works fine for automounting though. I haven't changed the wiki because I'm still not sure if the problem is on my side.

  • Is NFS client data cacheing possible?

    Yesterday, I was viewing an HD 1080 video with VLC, and noticed that Activity Monitor was showing about 34MB/sec from my NAS box. My NAS box runs OpenSolaris (I was at Sun for over 20 years, and some habits die hard), and the 6GB video file was mounted on my iMac 27" (10.7.2) using NFSv3 (yes, I have a gigabit network).
    Being a long term UNIX performance expert and regular DTrace user, I was able to confirm that VLC on Lion was reading the file at about 1.8MB/sec, and that the NFS server was being hit at 34MB/sec. Further investigation showed that the NFS client (Lion) was requesting each 32KB block 20 times!
    Note: the default read size for NFSv3 over TCP is 32KB).
    Digging deeper, I found that VLC was reading the file in 1786 byte blocks. I have concluded that Lion's NFSv3 client implement at least one 32KB read for each application call to read(2), and that no data is cached betweem reads (this fully accounts for the 20x overhead in this case).
    A workaround is to use say rsize=1024, which will increase the number of NFS ops but dramatically reduce the bandwidth consumption (which means I might yet be able to watch HD video over wifi).
    That VLC should start issuing such small reads is a bug, so I have also written some notes in the vlc.org forums. But client side cacheing would hide the issue from the network.
    So, the big question: is it possible to enable NFS client data cacheing in Lion?

    The problem solved itself mysteriously overnight, without any interference from myself.
    The systems are again perfectly happily mounting the file space (650 clients of them all at the same time
    mounting up to 6 filesystems from the same server) and the server is happily serving again as it has been for the past 2 years.
    My idea is that there has been a network configuration clash, but considering that the last modification of NIS hosts file was about 4 weeks ago and the latest server was installed then and has been serving since then, I have no
    idea how such clash could happen without interference in the config files. It is a mystery and I will have to make
    every effort to unravel it. One does not really like to sweep incidents like that un-investigated under the carpet.
    If anybody has any suggestions and thoughts on this matter please post them here.
    Lydia

  • This is a stupid question but I needed to ask because I don't want to go there and not being able to buy it, but can I get the iPhone 5 brought straight there when I go to an apple store?

    This is a stupid question but I needed to ask because I don't want to go there and not being able to buy it, but can I get the iPhone 5 brought straight there when I go to an apple store?

    And I meant go to the apple store physically without preordering it online, and I meant the Southampton one. So could I just stroll in apple store and buy a iPhone 5 in Southampton apple store and buy the iPhone 5 straight away? Because I didn't want to have to wait? I just want to go in and buy it and go out with it, if you guys get what I mean? And felipeV if it is in stock could I just buy it and leave with my iPhone 5?

  • Svc:/network/nfs/client problem in Solaris 10

    Hi,
    I`ve been trying to figure out what is the problem with the below scenario for so long and till now i`m not able to.
    i have a X4100 SunFire system with solaris 10 installed.
    most of the services are not coming up (ssh,ftp,etc....) each time i reboot the server, and after approximately 3 hours everything comes fine by it self.
    i noticed that the service :/network/nfs/client is taking too long while starting. This might be related to the problem.
    See below the svcs command : hope this will be usefull :)
    bash-3.00# svcs -xv ssh
    svc:/network/ssh:default (SSH server)
    State: offline since Wed May 20 16:37:45 2009
    Reason: Service svc:/network/nfs/client:default is starting.
    See: http://sun.com/msg/SMF-8000-GE
    Path: svc:/network/ssh:default
    svc:/system/filesystem/autofs:default
    svc:/network/nfs/client:default
    See: man -M /usr/share/man -s 1M sshd
    Impact: 3 dependent services are not running:
    svc:/milestone/multi-user-server:default
    svc:/system/basicreg:default
    svc:/system/zones:default
    any advise on this ?
    Appreciate your help,

    hi all
    issue resolved actually port was conflicting in /etc/services i have readded the entry in /etc/service
    Thanks

  • My friend set up my itunes account and they have forgotten the secret question and i need it for something on itunes HELP!!!

    my friend set up my itunes account and they have forgotten the secret question and i need it for something on itunes HELP!!!

    Some Solutions for Resetting Forgotten Security Questions: Apple Support Communities

  • I forgot my password recovery questions and i need it so i can purchase stuff on my ipad

    i forgot my password recovery questions and i need it so i can purchase stuff on my ipad

    Alternatives for Help Resetting Security Questions and/or Rescue Mail
         1. If you have a valid rescue email address, then use this procedure:
             Rescue email address and how to reset Apple ID security questions.
         2. Fill out and submit this form. Select the topic, Account Security. You must
             have a Rescue Email to use this option.
         3. This is the only option if you do not already have a valid Rescue Email.
             These are telephone numbers for contacting Apple Support in your country.
             Apple ID- Contacting Apple for help with Apple ID account security. Select
             the appropriate country and call. Ask to speak to the Account Security Team.
    Note: If you have already forgotten your security questions, then you cannot
             set up a rescue email address in order to reset them. You must set up
             the rescue email address beforehand.
    Your Apple ID: Manage My Apple ID.
                             Apple ID- All about Apple ID security questions.

  • Weird question, but it needs to be ask ( sorry )

    My friend bought a G5 dual 2.5 not the new one
    and i was there 2days ago to set it up, as i checked the specs of the mac it seems to be abit different from mine
    mine has ATI Radeon 9600 XT for the graphic card and his is GeForce FX 5200
    which one is better, i know mine came with the mac orginal so its safe but why is it the same mac with two different specs
    and do you think the person that sold the G5 change the card?
    its not a good place to ask this question but its needed for logic as well
    because his logic crash straight on the first launch and aperture isn't working on his it says
    WARNING:
    The installed graphics card does not meet the minimum requirements for Aperture.
    his applications crash more often than mine on the same day
    we both got almost the same setup
    G5 dual 2.5Ghz 3gb of rams and 2x21 inches LCD flat screens
    different interface, he is using the built in I'm using M-audio 1010LT
    this really serious
    and also to anyone that didn't buy the original mac from the shops please check the specs
    you might be going through the same thing as him
    thanks alot
    stash

    Stash,
    Check the RAM in the machine. If there is aftermarket RAM in there, it could be causing a problem. Run the Apple Hardware Test. Also, the GeForce card is the barebones card that ships with the machines. At least, it was the barebones with my dual 1.8. Not nearly enough for Aperture, I don't think. I run a lot of Motion on my machine and had to upgrade to a better ATI Radeon 9800 Mac Edition with 256MB in order to start getting any type of smooth workflow.
    The graphics card shouldn't affect Logic, obviously, but it would explain the Aperture problem.
    Check the RAM!!

  • I just purchased Apple TV AND AIRPORT EXPRESS. I am questioning if  I need it when I already have a Netgear Powerline AV 200 Adapter Kit XAVB2001. Does the Airport Express do the same thing?

    I just purchased Apple TV AND AIRPORT EXPRESS. I am questioning if  I need it when I already have a Netgear Powerline AV 200 Adapter Kit XAVB2001. Does the Airport Express do the same thing?

    Thank you so much.  Any specifics I should know about prior to connecting? The goal is to watch  Netflix from my iPad or iPhone 5 on my tv (located in different room from where Comcast internet modem is hard wired to main computer in house).  Movies would depend on wireless transmission to a smart tv not connected to modem.

Maybe you are looking for