Re: Newbie Question

I figured this one out...=C2=A0 I had missed adding the "-a tcp!*!564" opti=
on=20
on the file server bootargs.

Now it is working!


On 12/18/19 6:57 PM, Frank D. Engel, Jr. wrote:
> ok, I seem to have run into another one.
>
> I now have the file server booting as a cpu server with authentication=20
> enabled, and am trying to net boot another host from there.
>
> I have dhcpd and tftpd running on the file server; my /cfg/pxe/default=20
> looks like this:
>
>
> bootfile=3D/386/9pc
>
> bootargs=3Dtls
>
> auth=3D192.168.81.12
>
> fs=3D192.168.81.10
>
> mouseport=3Dps2intellimouse
>
> monitor=3Dvesa
>
> vgasize=3D1440x900x32
>
> *acpi=3D1
>
>
> The entry in /lib/ndb/local is (with "..." being the actual MAC address):
>
>
> sys=3Dthinker ether=3D... ip=3D192.168.81.20
>
> =C2=A0=C2=A0=C2=A0 dom=3Dthinker.9cluster
>
> =C2=A0=C2=A0=C2=A0 bootf=3D/386/9bootpxe
>
>
>
> The "thinker" system is starting the plan9 kernel over the network (it=20
> has no local disk); I get prompted for a user account and for now am=20
> just using "glenda".=C2=A0 I enter the password I set for the auth server=
,=20
> for secstore, and for the filesystem on the file server (I used the=20
> same for each), and I am getting this on "thinker":
>
>
> mount: mount /root: tls error
>
> mount -c #s/boot /root: mount 145: mount
>
>
> bootargs is (tcp, tls, il, local!device)[tls]
>
>
> When this happens the file server console shows this:
>
>
> /bin/aux/trampoline: dial net!$fs!9fs: connection rejected
>
>
> I'm not sure if this means that the file server is rejecting the=20
> connection from the (currently) terminal, or what might be going=20
> on...=C2=A0 the "$fs" showing up on the file server console seems curious=
=20
> to me as I would have thought if that were coming from the terminal=20
> the "$fs" would have been translated from there?=C2=A0 Again not sure whe=
re=20
> to go from here...
>
>
> I was originally having a problem with secstored not having a=20
> "factotum" file for the terminal to retrieve, but after having worked=20
> that one out it now stored a key in it (and is no longer asking me to=20
> set one) for my "dom=3D9cluster", so I did manage to get past that one.
>
>
> I also noticed that if I retry from the bootargs prompt I get the=20
> additional message "ipconfig: dialicmp6: address in use", but I am=20
> guessing that is simply a leftover from the earlier attempt, and=20
> assuming I can safely ignore that...
>
>
>
>
> On 12/16/19 4:40 PM, Frank D. Engel, Jr. wrote:
>> Thank you!
>>
>>
>> When I tried bringing it up as a cpu server with auth enabled it did=20
>> indeed make it past the errors.
>>
>> I'll see if I can work things out from there.
>>
>>
>> On 12/16/19 2:27 PM, [email protected] wrote:
>>> i believe that this is due to running a with service=3Dterminal.
>>> this causes factotum to be started as a client with no keys in it.
>>>
>>> the p9any auth protocol starts by the server presenting a set of
>>> keys, auth domains and protocols, which you wont have in this
>>> case (no keys there). which is most likely the reason the whole
>>> thing fails.
>>>
>>> if you boot your fileserver with service=3Dcpu, then when factotum star=
ts
>>> it will prompt you for authid and password which will be the=20
>>> credentials
>>> of the hostowner (of the fileserver) which should have to match what=20
>>> you
>>> have on the authentication server. this information can be stored in
>>> nvram to avoid the prompt on boot.
>>>
>>> even if it doesnt match the auth key for (that user) on the authserver,
>>> the fileserver should be able to boot and mount its root filesystem
>>> as factotum talks to itself in this scenario and having the same keys
>>> on both sides.
>>>
>>> its just about to fail when there are no keys at all.
>>>
>>> i hope this makes sense.
>>>
>>> --=20
>>> cinap
>>>
>=20

------------------------------------------
9fans: 9fans
Permalink: https://9fans.topicbox.com/groups/9fans/Tda6e61e03ce222c0-M38b41=
bb53e4bc0dccad36a4b
Delivery options: https://9fans.topicbox.com/groups/9fans/subscription