I assume the Solaris machine is the server, and the NetBSD machine
is the client...if this is the case, it could be that the Solaris
machine's mountd is requiring the use of privileged ports for mounts,
and NetBSD's mount_nfs uses nonprivileged ports by default.  Try using
"/sbin/mount -o -P liasun3:/usr /mnt" and see if that works; that
tells NetBSD's mount_nfs to use privileged ports.

  On a related note: Can anyone tell me how to specify the above in
/etc/fstab?  I can't seem to figure it out...


                            Good luck,
                            -Dave McGuire
                             Systems Engineer
                             Digital Express Group, Incorporated
                             mcguire@digex.net


On January 25, you wrote:
> > I'm having problems mounting filesystems from Solaris machines:
> > 
> > 	/-1# /sbin/mount liasun3:/usr /mnt
> > 	/-0# l /mnt
> > 	ls: /mnt: Permission denied
> > 	/-0# l
> 
> The problem seems to be that the Solaris machines don't trust the
> NetBSD machine, since snoop gives me:
> 
> 	/-0# snoop host liasun3 and host liasun13
> 	Using device /dev/le (promiscuous mode)
> 	liasun13.epfl.ch -> liasun3.epfl.ch PORTMAP C GETPORT prog=100003 (NFS) vers=2 proto=UDP
> 	liasun3.epfl.ch -> liasun13.epfl.ch PORTMAP R GETPORT port=2049
> 	liasun13.epfl.ch -> liasun3.epfl.ch PORTMAP C GETPORT prog=100005 (MOUNT) vers=1 proto=UDP
> 	liasun3.epfl.ch -> liasun13.epfl.ch PORTMAP R GETPORT port=32969
> 	liasun13.epfl.ch -> liasun3.epfl.ch MOUNT C Mount /usr
> 	liasun3.epfl.ch -> liasun13.epfl.ch MOUNT R Mount OK FH=009A
> 	liasun13.epfl.ch -> liasun3.epfl.ch NFS C STATFS FH=009A
> 	liasun3.epfl.ch -> liasun13.epfl.ch RPC R (#7) XID=9616 Can't authenticate (too weak)
> 	liasun13.epfl.ch -> liasun3.epfl.ch NFS C GETATTR FH=009A
> 	liasun3.epfl.ch -> liasun13.epfl.ch RPC R (#9) XID=9617 Can't authenticate (too weak)
> 	liasun13.epfl.ch -> liasun3.epfl.ch NFS C GETATTR FH=009A
> 	liasun3.epfl.ch -> liasun13.epfl.ch RPC R (#11) XID=9618 Can't authenticate (too weak)
> 
> Is that a problem in NetBSD ?
> As far as I know, the Solaris side doesn't require "secure" or "kerberos",
> so the authentication is AUTH_UNIX, which doesn't require anything like 
> libcrypt...
> 
> 
> 	Stefan
>