<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div> <!--StartFragment--><div style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;">Hi All,</div><br style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;"><div style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;">In a bugzilla (<span class="Object" role="link" id="OBJ_PREFIX_DWT522_com_zimbra_url" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;"><a target="_blank" href="https://bugzilla.redhat.com/show_bug.cgi?id=1546713" style="color: #336699; text-decoration: none; cursor: pointer;" data-mce-href="https://bugzilla.redhat.com/show_bug.cgi?id=1546713" data-mce-style="color: #336699; text-decoration: none; cursor: pointer;">https://bugzilla.redhat.com/show_bug.cgi?id=1546713</a></span>) I was reading it showed that it should be possible to restrict the NFSv4 usage to only use 4.0 (since 4.1/4.2 is not supported).</div><div style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;">To try that, I modified an existing share so it reads :</div><br style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;"><div style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #fafafa; text-decoration-style: initial; text-decoration-color: initial;"><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;">EXPORT{</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>Export_Id = 2;</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>Path = "/DATA";</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>FSAL {</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> name = GLUSTER;</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> hostname="localhost";</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> volume="DATA";</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> }</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>Access_type = RW;</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>Disable_ACL = true;</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>Squash="No_root_squash";</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>Pseudo="/DATA";</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>Protocols = "4" ;</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>Transports = "UDP","TCP";</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>SecType = "sys";</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>NFSv4 {</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>minor_versions = 0;</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> <span> </span>}</span></div><div><span style="font-family: 'courier new', courier, monaco, monospace, sans-serif;" data-mce-style="font-family: 'courier new', courier, monaco, monospace, sans-serif;"> }</span></div><br><div>And restarted the nfs-<span id="DWT524" class="ZmSearchResult" style="background-color: #fffec4;" data-mce-style="background-color: #fffec4;">ganesha</span><span> </span>service. Seemed to start fine and mounted the share from a client and specifying the mount option "-o vers=4.1" and indeed it mounted it with NFSv4.1 (I was expecting/hoping it would refuse to mount).</div><br><div>What is (or should be) the way to only allow NFSv4.0 exports (if possible at all) ?</div><br><div>Running GlusterFS 3.12 / RHGS 3.4 with packages :</div><div><div>bash-4.2# rpm -qa | grep<span> </span><span id="DWT526" class="ZmSearchResult" style="background-color: #fffec4;" data-mce-style="background-color: #fffec4;">ganesha</span></div><div>glusterfs-<span id="DWT528" class="ZmSearchResult" style="background-color: #fffec4;" data-mce-style="background-color: #fffec4;">ganesha</span>-3.12.2-18.el7rhgs.x86_64</div><div>nfs-<span id="DWT530" class="ZmSearchResult" style="background-color: #fffec4;" data-mce-style="background-color: #fffec4;">ganesha</span>-2.5.5-10.el7rhgs.x86_64</div><div>nfs-<span id="DWT532" class="ZmSearchResult" style="background-color: #fffec4;" data-mce-style="background-color: #fffec4;">ganesha</span>-gluster-2.5.5-10.el7rhgs.x86_64</div><br></div><div>bash-4.2# rpm -qa | grep ^glusterfs<br></div><div><div>glusterfs-libs-3.12.2-18.el7rhgs.x86_64</div><div>glusterfs-<span id="DWT534" class="ZmSearchResult" style="background-color: #fffec4;" data-mce-style="background-color: #fffec4;">ganesha</span>-3.12.2-18.el7rhgs.x86_64</div><div>glusterfs-client-xlators-3.12.2-18.el7rhgs.x86_64</div><div>glusterfs-fuse-3.12.2-18.el7rhgs.x86_64</div><div>glusterfs-cli-3.12.2-18.el7rhgs.x86_64</div><div>glusterfs-api-3.12.2-18.el7rhgs.x86_64</div><div>glusterfs-server-3.12.2-18.el7rhgs.x86_64</div><div>glusterfs-3.12.2-18.el7rhgs.x86_64</div><br><div>Thanks in advance,</div><div>Nico van Roijen</div></div></div><!--EndFragment--> </div></div></body></html>