NFS Mounting, client credentials too weak

[Colin J. Raven]

On Jan 26 at 12:48, Kris Kennaway said:

> On Wed, Jan 26, 2005 at 09:40:58PM +0100, Joachim Dagerot wrote:
>>
>> On 2005-01-26 Kris Kennaway  wrote:
>>
>> On Wed, Jan 26, 2005 at 09:25:08AM +0100, Colin J. Raven wrote:
>>>> On Jan 25 at 12:04, Kris Kennaway wrote:
>>>>
>>>>> On Tue, Jan 25, 2005 at 12:39:59PM +0100, Joachim Dagerot wrote:
>>>>>>
>>>>>> I'm trying to mount from a freeSBIE system (freeBSD 5.3) to my freeBSD
>>>>>> server (5.1) when I get the errormessage: RPCPROG_MNT: RPC:
>>>>>> Authentication error; why = Client credential too weak.
>>>>>>
>>>>>> What can I do?
>>>>>
>>>>> Try to mount as root, not a nonprivileged user.
>>>>
>>>> Unfortunately I ran into the same situation concerning the error message
>>>> above. I *was* root when it happened. I thought perhaps the problem was
>>>> that I was *su'd* to root, so I connected a monitor to the client,
>>>> logged in *as* root then tried to mount the remote share (from my office
>>>> server). Still the same result.
>>>
>>>> To further complicate (or simplify) things, *both* machines are
>>>> 5.3-RELEASE, and in fact the machines themselves are as close to clones
>>>> of one another as you can get. I mention this because inconsistencies
>>>> between local conditions on both machines thus becomes a non-issue.
>>>
>>> What two machines?  Above you said one is a FreeSBIE-based 5.3 system
>>> and the other a 5.1 system.
>>
>> I am me and me is Joachim. Colin is Colin and never shall their system be mixed up.
>
> OK, thanks for clarifying :-)
>
> Are you running the full set of nfs daemons on client and server
> (nfs_server_enable/nfs_client_enable in rc.conf)?

OK, this is Colin (FreeBSD 5.3 -> 5.3)
I'm glad Joachim got his issues resolved by mounting as root. I wish I 
could do the same :-)

I don't have nfs_server_enable="YES" on the "client" machine, only 
because...well...it's the client machine. No "howto" I've read (so far) 
has advocated doing that as a client machine requirment - unless 
that is - you're also exporting a share in the other direction.

That said though, it's a trivial matter to try out and see if it makes a 
difference. I can't see why it might, but hey it's *well* worth the 
small amount of time necessary to start stuff up.

Regards to all,
-Colin