Bug#633526: vserver kernel breaks ssh public_key authentication on NFS

On Thu, 2011-12-01 at 14:52 +0100, Mirco Bauer wrote:
> tags 633526 + patch
> retitle 633526 NFS client uid/gid cache broken on VServer kernels
> thanks
> 
> Herbert Poetzl wrote:
> 
> > we now understand the problem, and it was fixed for 
> > 3.0.4 with the following patch: 
> >
> > http://vserver.13thfloor.at/ExperimentalT/delta-nfs-fix02.diff
> 
> I can confirm that this patch is fixing the issue. I have tested the patch on top of linux-2.6 2.6.32-37 on a production server
> and we no longer experience the NFS uid/gid issue.
> 
> The issue can easily be tested by doing "ls -l $file" on a NFS mount. The values will show up correctly.
> After "cat $file > /dev/null; ls -l $file" it will suddenly show wrong uid/gid values of: 4294967294/4294967294 (-2/-2)
> Waiting for about 20 seconds "ls -l $file" will show again correct values. So the client cached values are clearly the problem.
> 
> I strongly recommend to include the patch into the next stable point release as this is major NFS regression from Debian Lenny.

I'll update to vs2.6.32.48-vs2.3.0.36.29.8 which includes the above and
one other NFS fix
<http://vserver.13thfloor.at/ExperimentalT/delta-nfs-fix01.diff>.

Herbert, if you could briefly explain what the two changes are doing
that would be helpful.

Ben.

-- 
Ben Hutchings
Computers are not intelligent.	They only think they are.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=Hlgi
-----END PGP SIGNATURE-----