Subject: Re: [vserver] Bug#633526: vserver kernel breaks ssh public_key authentication on NFS
From: Harald Dunkel <harald.dunkel@aixigo.de>
Date: Tue, 12 Jul 2011 13:21:01 +0200

On 07/12/11 11:59, Ben Green wrote:
> 
> Quoting Ben Hutchings <ben@decadent.org.uk>:
> 
>>
>> # ls -al /home/hdunkel/.ssh/authorized_keys
>> -rw-------   1 4294967294 4294967294   1406 Jun 15 14:34 authorized_keys
> 
> That's what a file system which been mounted with the "tag" option under a vserver
kernel looks like when exported via NFS to a machine with a standard kernel I believe.
> 

The NFS client is running the kernel with vserver patches.
The NFS server uses Debian's regular kernel.

If I use NFSv3 on the client instead of NFSv4, then this
problem is gone. NFS server is unchanged. Mount options
for this case:

nfs-home:/space/home /home nfs rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=172.19.96.215,mountvers=3,mountport=55750,mountproto=udp,addr=172.19.96.215
0 0


Using NFSv4: Please note that the other files in my ~/.ssh do
not seem to change their ownership on the NFS client. Just the
"authorized_keys" file is affected.

Please mail if I can help to track this down.


Regards

Harri