Miklos Szeredi | 5 Feb 2013 06:56
Picon

Re: idmap, uid, gid - other users

On Tue, Oct 30, 2012 at 9:14 AM, Narcis Garcia - GiLUG
<informatica <at> actiu.net> wrote:
> A domain name has changed for Lapipaplena. Please update the link for:
> http://wiki.gilug.org/index.php/How_to_mount_SFTP_accesses
>

Please mail me your sourceforge user ID and I'll update your wiki
editing permissions.

Thanks,
Miklos

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
Maxim Yegorushkin | 4 Feb 2013 14:12
Picon
Gravatar

keeps reconnecting every 3 minutes

Hi fuse-sshfs,

I use the following command to mount a remote directory from server:

    sshfs server:/data /data -o
noatime,compression=yes,reconnect,kernel_cache,allow_other

In /var/log/secure on server I can see that the client reconnects ever 3
minutes:

    /var/log/secure:4921:Feb  4 12:33:34 server sshd[1829]: Accepted
publickey for prod from client port 38997 ssh2
    /var/log/secure:4923:Feb  4 12:33:34 server sshd[1833]: Received
disconnect from client: 11: disconnected by user
    /var/log/secure:4926:Feb  4 12:36:34 server sshd[1977]: Accepted
publickey for prod from client port 38999 ssh2
    /var/log/secure:4928:Feb  4 12:36:34 server sshd[1981]: Received
disconnect from client: 11: disconnected by user
    /var/log/secure:4939:Feb  4 12:39:34 server sshd[2130]: Accepted
publickey for prod from client port 39001 ssh2
    /var/log/secure:4941:Feb  4 12:39:34 server sshd[2134]: Received
disconnect from client: 11: disconnected by user
    /var/log/secure:4944:Feb  4 12:42:34 server sshd[2244]: Accepted
publickey for prod from client port 39003 ssh2
    /var/log/secure:4946:Feb  4 12:42:34 server sshd[2248]: Received
disconnect from client: 11: disconnected by user
    /var/log/secure:4949:Feb  4 12:45:34 server sshd[2359]: Accepted
publickey for prod from client port 39006 ssh2
    /var/log/secure:4951:Feb  4 12:45:34 server sshd[2363]: Received
disconnect from client: 11: disconnected by user
(Continue reading)

Zsolt Ero | 8 Jan 2013 09:35
Picon

IPv6 bug / lack of documentation

Hi,

I'm using the latest Debian 6, and my problem is that connecting to IPv6
host is buggy/totally undocumented. I've spend quite some time, till I
realized that when trying to connect to IPv6:

1. The error `Connection reset by peer` is actually misinforming, since
it's not even trying to connect to the host

What makes it extremely hard to detect is the fact that there is no
information given, just 'connection reset by peer`. Once I found the
extra-debug option on the website, I was able to run sshfs and get the
output:

ssh: Could not resolve hostname 2a00: Name or service not known
read: Connection reset by peer

>From this I realized that it cuts the address at the first `:`

2. SSHFS can connect to the host, if I put the address manually in the
/etc/hosts file
3. SSHFS can connect to the host, if I put it's name in [ ] brackets. This
is 100% undocumented and I only found it via Googleing a lot and finding it
in a reply to a mail on a public mailing list (maybe this one)

I'd like to ask to:
- either change the behaviour not to parse at the first : but at the last
one?
- document the current behaviour on the website?

(Continue reading)

Reuben Thomas | 4 Dec 2012 16:36
Gravatar

Investigating hangs

I'm trying to use an SSHFS mount for backing up a large amount of data. I
use Unison for my backups:

http://www.cis.upenn.edu/~bcpierce/unison/

Unison essentially uses the rsync algorithm. It's very stable and I've used
it for years successfully. Normally it uses ssh directly (like rsync), but
I am trying to use it with sshfs as I want to use it to tunnel an encrypted
file system (such as s3ql: http://code.google.com/p/s3ql/).

I have used Unison with a FUSE file system successfully in the past
(plpfuse: http://plptools.sourceforge.net/, which I wrote myself!).

I am finding two problems using Unison over SSHFS: first, data transfer is
very slow: my ADSL uplink usually transfers upstream at about 100kb/s, but
with Unison over sshfs seems to run about 1kb/s. Secondly, after running
for a while (usually some hours), it seems to get stuck somewhere in kernel
space.

Of course, I am not asking here for a solution to problems involving 3rd
party software, but I was wondering if anyone could give me tips on
tracking down the source of the problems in this case. So far, I have
discovered is that working just with S3QL, which also uses FUSE, mounting a
local directory, unison is quite happy, and I get the same problem of
freezing when using sshfs on its own as when using sshfs+S3QL, so the
problem appears to be confined to the interaction of Unison and sshfs.

I'm using sshfs 2.4, and Unison 2.40.65.

--

-- 
(Continue reading)

jinzhong zhang | 27 Nov 2012 16:32
Picon
Picon

Listing files won't work in all ways after fusermount and pm-hibernate

Hi,

Please see details in
https://bugzilla.redhat.com/show_bug.cgi?id=880428

Thank you.

Cheers,
Chang

------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov
Amir Wald | 25 Nov 2012 09:09

Permission problems with sshfs

Hi,

I'm experiencing a scenario in which sshfs doesn't do permissions
correctly. I'll describe it here and hope you can assist by providing a
workaround of fix.

I have two cherokee web servers for the same webstie: call them A and B.
They both run php-fpm but only A runs cherokee (doing load balancing to B's
php-fpm).
A simple static cache mechanism is in place using files. If a page is
requested, cherokee checks if the file has been created and serves it.
Otherwise, it calls php-fpm which will generate the page.

If the URL requested was http://example.com/some/page/data the static cache
file will be called /cache/some/page/data.html

It makes sense that both A and B can generate the static files and that A
(running only Cherokee) would be able to read them.

This is where sshfs comes to the picture and B mounts the relevant
directory on A so it can write to it.
php-fpm runs as user cherokee:cherokee
sshfs connects as user root:root
As unfortunately I couldn't make sshfs connect as cherokee on my gentoo
installation.

PHP's mkdir() function is used to create directories (when needed) and it's
using permission 777 for that directory. However, the directory is NOT
create with the requested drwxrwxrwx but rather  drwxr-xr-x
Do mind that although php-fpm has the user cherokee:cherokee, the directory
(Continue reading)

Joachim Kopp | 6 Nov 2012 21:05
Picon

sshfs mount with mount point in $PATH

Hi,

(apologies if this is already a known issue, I couldn't find it anywhere.)

I recently encountered the following problem with sshfs (not sure if
it's an sshfs issue or applies to fuse in general): When I try to create
an sshfs mount to a mount point that is in my $PATH variable, sshfs
hangs and the system as a whole is partially blocked. For instance, even
simple commands like "ls" will hang afterwards when asked to access the
intended mount point or its parent directory. Killing all user processes
does not solve the problem, I had to reboot the machine.

Steps to reproduce (using bash syntax):

  export PATH=$HOME/mountpoint/whatever:$PATH
  sshfs user <at> host.com: $HOME/mountpoint

where, of course, $HOME/mountpoint should be an empty directory.

My sshfs and fuse versions are

SSHFS version 2.3
FUSE library version: 2.8.6
fusermount version: 2.8.6
using FUSE kernel interface version 7.12

The system is Kubuntu 12.04 with the x86_64 version of kernel
3.2.0-32-generic. I can reproduce the problem on both my Laptop and
desktop PCs, both of which run the same system, kernel, fuse and sshfs
versions.
(Continue reading)

Super Jamie | 27 Sep 2012 13:48
Favicon

FUSE option for different port?

Hello,

I'd like to use sshfs as a FUSE mount (with autofs) to mount to an ssh
server I run in a port other than 22.

However, there is no port option when FUSE-mounting sshfs, there is only a
port option (-p PORT or -o port=PORT) when running sshfs directly from the
commandline.

Is it possible to extend the FUSE options to allow connections to ports !=
22? If so, could I please request this enhancement?

Cheers,
Jamie
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://ad.doubleclick.net/clk;258768047;13503038;j?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
Helmut Jarausch | 13 Sep 2012 09:23
Picon
Picon
Favicon

*** urgent *** fusermount -u gives : entry for /numa-sv not found in /etc/mtab

Hi,

please excuse the "*** urgent ***" tag, but I'm using sshfs in my daily  
backup
which is broken now.

Since a short time I have a critical problem with sshfs.
I cannot unmount it !

Doing, e.g.,

sshfs  -o transform_symlinks -o Cipher="blowfish" numa-sv:/Save /numa-sv

works just fine.

df shows
numa-sv:/Save  148976776 102070872  40882408  72% /numa-sv

grep /numa-sv /etc/mtab  shows

numa-sv:/Save /numa-sv fuse.sshfs rw,nosuid,nodev 0 0

BUT trying to do (which has been working for a long time)

fusermount -u /numa-sv

now gives

fusermount: entry for /numa-sv not found in /etc/mtab

(Continue reading)

Alkis Georgopoulos | 9 Sep 2012 12:54
Picon

Wrong permissions returned in access() call

Hi, SSHFS returns "writeable, executable" even for files that lack those
attributes:

$ mkdir /tmp/etc
$ sshfs localhost:/etc /tmp/etc

$ strace gvfs-info /etc/login.defs 2>&1 | grep '^access.*login.defs'
access("/etc/login.defs", R_OK)         = 0
access("/etc/login.defs", W_OK)         = -1 EACCES (Permission denied)
access("/etc/login.defs", X_OK)         = -1 EACCES (Permission denied)

$ strace gvfs-info /tmp/etc/login.defs 2>&1 | grep '^access.*login.defs'
access("/tmp/etc/login.defs", R_OK)     = 0
access("/tmp/etc/login.defs", W_OK)     = 0
access("/tmp/etc/login.defs", X_OK)     = 0

This e.g. makes nautilus try to execute text files on sshfs mounts:
https://bugzilla.gnome.org/show_bug.cgi?id=679187
https://bugs.launchpad.net/ubuntu/+source/sshfs-fuse/+bug/1017870

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
Dalvik Khertel | 9 Aug 2012 10:36

sshfs and SELinux contexts

Dear sshfs mailing list,

I'm trying to find a way to get the context= mount option to work with sshfs.

I know that sshfs cannot support extended attributes, since sftp does not
support them, even though someone has been trying to get a patch for this
upstream:
https://bugzilla.mindrot.org/show_bug.cgi?id=1953
So I was hoping I can at least use the context option as a poor man's drop-in
replacement for this lack of functionality.

I'm not exactly sure at which point or for what reason the option gets
discarded, but I do know that it does not have any effect (obviously I
made attempts on an SELinux enabled host).

Trying something like
`sshfs -o context=system_u:object_r:dovecot_t:s0 remotehost:/srv/imap /srv/imap`
gets me the error message:
fuse: unknown option `context=system_u:object_r:dovecot_t:s0'
(and obviously `mount -t fuse.sshfs -o context=...` does the same)

The message seems to point to fuse, even though fuse itself can in principle
deal with extended attributes in one way or another according to this
discussion:
http://www.spinics.net/lists/selinux/msg09485.html

After browsing through a lot of mailing lists and forum posts, I found that
someone managed to find a way around the limitations of fuse to get the context
option to work with the ntfs-3g fuse filesystem:
https://bugzilla.redhat.com/show_bug.cgi?id=502946#c11
(Continue reading)


Gmane