Configuring NFSv4 domain name

Question

Level 3

827 points

Configuring NFSv4 domain name

I currently use NFSv3 sharing from a Debian box to my Mountain Lion clients, and it works quite well. I was having issues (as do many, or so I read) with NFSv4, one of which was that the initial mount would take perhaps 30secs to a minute to list the contents of the directory.

However, I've just read the following here:

We […] set the NFSv4 domain name using "dscl" as described in the man page of "opendirectoryd" of 10.8.3. After a reboot […] the slowliness of NFSv4 was gone!

The dscl use is as follows:

NFSv4 Domain name
     The following will set the default domain name used to map user and group identities in NFSv4
     client/server operations.


     dscl . -create Config/NFSv4Domain RealName <Example.com>


     This command requires root privileges.

I haven't got a clue how to go about implementing an "NFSv4 domain name", ie. how to choose it, what format it takes, whether I should use the same or related domain names on each client etc.

Would someone be willing to clarify things for me?

I'll obviously still be reading around once I've posted this, but all the documentation I've come across so far seems to expect a greater degree of competency in matters of networking than I can lay claim to. 🙂

Thanks.

Mac mini (Mid 2011), OS X Mountain Lion (10.8.2), 256GB SSD, 500GB HDD, 8GB RAM

Posted on Apr 16, 2013 8:30 PM

Reply

Answer 1

Linc Davis

Level 10

209,739 points

Apr 17, 2013 6:15 AM in response to Scotch_Brawth

I don't see how this configuration change could have any effect on performance, but the default domain name would be the part of the FQDN common to all NFS servers on the network; e.g., if the servers have names of the form "a.example.com", "b.example.com", etc., then the default name would be "example.com" and you would address the servers as "a", "b", and so on.

Reply

Answer 2

Scotch_Brawth Author

Level 3

827 points

Apr 26, 2013 7:36 PM in response to etresoft

I decided to take another crack at installing Netatalk 3 and finally got it working. So, this question is somewhat superfluous now.

Thanks to those who responded.

Reply

Answer 3

Jasnum76

Level 1

0 points

Apr 17, 2013 6:42 AM in response to Linc Davis

hi Linc Davis, n Scotch, sorry for post over here cos im new .... i dont know how to ak u directly to u , i do hv a serious problem , i cant get any help even i went to it support of Apple , my problembegin from pass 2 weeks , my mac book air , iphone , ipad , windows laptops all, my devise with connect to wifi was hack ...

first i found out this hacker using a "ramdisk software " install in my window ... but i cant check it out in my mac

the problem is even when i delete the all partitions n reinstall again , my window or mac system will be the same , which r the bluetooth on , wifi on , home or work group file or librery are sharing ,

admin password overwrite , permission overite , even i off the wifi n bluetooth , in the background service still working , i cant delete any file or uninstall any application releted to those file , even if i uninstall, within a min will be automatic install, n my rootkit are change , { i use ox rootkie hunter to check } ,

i found out under File - Get info - owner or user permmision - i can see some extra user , and with permission of write n send by dropbox , i cant install drop box software of couse ,[ i cant founf the dropbox in my appilication],

in the disk utilitis - repair disk permission , even i repair 100 times still will having the same problem ..i provide the copy of the repair ....

... and all this happen which im not conecter to wifi.. so i suspect his is around me which using some sort of air port express or wimax things

Repairing permissions for “Air!”

Permissions differ on "Library", should be drwxrwxr-t , they are drwxr-xr-x .

Permissions differ on "System/Library/User Template", should be drwx------ , they are drwx---r-x .

Permissions differ on "Library/Application Support", should be drwxrwxr-x , they are drwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/zh_TW.lproj/RemoteDesktopMenu.nib" , should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/Rem ote Desktop Message.app/Contents/Resources/zh_TW.lproj/UIAgent.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/zh_TW.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/zh_CN.lproj/RemoteDesktopMenu.nib" , should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/Rem ote Desktop Message.app/Contents/Resources/zh_CN.lproj/UIAgent.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/zh_CN.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/ko.lproj/RemoteDesktopMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/Rem ote Desktop Message.app/Contents/Resources/ko.lproj/UIAgent.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/ko.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/Dutch.lproj/RemoteDesktopMenu.nib" , should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/Rem ote Desktop Message.app/Contents/Resources/Dutch.lproj/UIAgent.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/Dutch.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/Italian.lproj/RemoteDesktopMenu.ni b", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/Italian.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/Spanish.lproj/RemoteDesktopMenu.ni b", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/Rem ote Desktop Message.app/Contents/Resources/Spanish.lproj/UIAgent.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/Spanish.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/French.lproj/RemoteDesktopMenu.nib ", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/Rem ote Desktop Message.app/Contents/Resources/French.lproj/UIAgent.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/French.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/German.lproj/RemoteDesktopMenu.nib ", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/Rem ote Desktop Message.app/Contents/Resources/German.lproj/UIAgent.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/German.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/Japanese.lproj/RemoteDesktopMenu.n ib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/Rem ote Desktop Message.app/Contents/Resources/Japanese.lproj/UIAgent.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/Japanese.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/English.lproj/RemoteDesktopMenu.ni b", should be drwxr-xr-x , they are -rwxr-xr-x .

Repaired "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/Resources/English.lproj/RemoteDesktopMenu.ni b".

Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired.

Permissions differ on "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/Rem ote Desktop Message.app/Contents/Resources/English.lproj/UIAgent.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Su pport/LockScreen.app/Contents/Resources/English.lproj/MainMenu.nib", should be drwxr-xr-x , they are -rwxr-xr-x .

and with my iphone n ipad , he can overwrite my software which i cant change the location setting ,bluetooth setting which always on n my chat history in whatsapps, line ...etc histories send out automatic , my photo even i hv been deleted , will come out again in some time ...

Please help me if possible... Tq very much

Reply

Answer 4

Scotch_Brawth Author

Level 3

827 points

Apr 17, 2013 1:53 PM in response to Linc Davis

NB: I've reported Jasnum76 so hoepfully his post will vanish/be relocated soon enough.

I'm afraid I don't understand your response though, Linc Davis. I'd appreciate it if you could offer more information.

One thing I have found is that the Domain Name setting on my server is stored in "/etc/idmapd.conf", and is currently specified as "localdomain". This obviously isn't a valid domain name, so I'm assuming that when the NFS service queries this variable, it uses the server's generic domain name. This appears to be found in /etc/hosts, and is currently of the form:

127.0.0.1 localhost

127.0.1.1 <hostname>.<SLD>.home

I'm not sure why the FQDN is linked to 127.0.1.1. Is that a mistake? Also, does it matter that I've chosen a non-ICANN TLD? I don't expect this server to ever function as a web server, and I've read that any web server would most likely have its own FQDN specified in its own conf file anyway; but I'd hate to have this all fall apart because I was wrong.

I've also just read that the client and servers all have to use the same SLD.TLD, which marries up with what you wrote.

So, coming back to the dscl command: what do I use for RealName? That aside, I'm assuming that what I would do is the following to set my clients to match the server:

dscl . -create Config/NFSv4Domain RealName <<SLD>.home>

Where <SLD> is the same as <SLD> on the server. By the way, are the angle brackets in the original command just a visual guide or are they an essential part of the command?

Also, how will running the dscl command affect other services on my Mac? Judging from how many links there are to the hostname and domain name on the Debian server, I'd like to know what making this change on the client may do to my other services.

Thanks.

EDIT: Why on earth has this thread been moved to OS X Server?

Reply

Answer 5

Scotch_Brawth Author

Level 3

827 points

Apr 17, 2013 5:00 PM in response to Linc Davis

I can't help with the configuration of your Linux server.

You've misunderstood. I'm not asking for help with the Debian server, but with the Mac clients that connect to it. My references to the FQDN on the server were to help with understanding the related changes on the clients.

Anyway, appreciate the input you were able to offer. Hopefully someone'll come along who's got more experience with these matters.

I didn't request that this thread be moved.

Sorry, I wasn't implying it was you. I think someone made the same mistake you did and thought I was discussing how to modify Server settings, with the additional mistake that they thought I was running OS X Server. Thing is, I can't move it back now. Don't suppose you could "Report" it and have it moved back to the Mountain Lion forum on my behalf?

🙂

Reply

Answer 6

etresoft

Level 9

56,578 points

Apr 17, 2013 5:24 PM in response to Scotch_Brawth

That sounds like an IPv6 issue. It thinks it can use IPv6 and that has to timeout before it tries IPv4. I don't think it would be wise to use 127.0.0.1 as an IP address for the server. It should be something that the Mac can find too.

Reply

Answer 7

Jasnum76

Level 1

0 points

Apr 17, 2013 3:24 PM in response to Scotch_Brawth

Hi, Scotch Brawth

Thank you very much of yr help !

Reply

Answer 8

Linc Davis

Level 10

209,739 points

Apr 17, 2013 5:10 PM in response to Scotch_Brawth

Don't suppose you could "Report" it and have it moved back to the Mountain Lion forum on my behalf?

Done.

Reply

Answer 9

Linc Davis

Level 10

209,739 points

Apr 17, 2013 3:48 PM in response to Scotch_Brawth

I can't help with the configuration of your Linux server. Your understanding of the default domain name seems to be correct. The setting won't affect anything other than the NFS client (and I doubt that it will affect even that.) I didn't request that this thread be moved.

Reply