showmount -e issue

slowerogue · 10-18-2012, 03:21 AM

Hi gais,
im using rhel6.3 server
and rhel desktop on vmware on another pc.

on rhel desktop
it gives

Code:

[root@localhost ~]# showmount -e 192.168.1.136
clnt_create: RPC: Port mapper failure - Timed out

[root@localhost client]# rpcinfo -p 192.168.1.136
rpcinfo: can't contact portmapper: RPC: Remote system error - No route to host

thats server's ip, and i run this command from the rheldesktop
is this correct step? thx

rtmistler · 10-18-2012, 12:57 PM

No route to host means that your local host is unable to talk to the address 192.168.1.136 for some reason.

First diagnose your local network, "ifconfig -a"

If you do not have an attachment to a 192.168.1.xxx network, then that's problem #1.

If you have an address on that network, or a viable class B or C address, then try a ping. Try first pinging the router, "ping 192.168.1.1", if that doesn't work. Ping your own IP address, which is the address shown by the ifconfig command. Note if your address is something like 169.<something>.<something>.<something> then that's a DHCP failed address assignment and it's not a real address. A real address is typically 192.x.y.z, or 10.x.y.z, but there are others. The "self" address is 127.0.0.1 which means "loopback", you can ping that address to verify that your IP stack is running at all.

If you have a local IP problem, then you need to resolve that before you can talk to that remote system. If your system is fine from an IP and network connection status, then perhaps you cannot reach the remote system. Ping that system's IP address, and also try ping -R to show the route.

slowerogue · 10-21-2012, 10:08 PM

Quote:

Originally Posted by rtmistler

No route to host means that your local host is unable to talk to the address 192.168.1.136 for some reason.

First diagnose your local network, "ifconfig -a"

If you do not have an attachment to a 192.168.1.xxx network, then that's problem #1.

If you have an address on that network, or a viable class B or C address, then try a ping. Try first pinging the router, "ping 192.168.1.1", if that doesn't work. Ping your own IP address, which is the address shown by the ifconfig command. Note if your address is something like 169.<something>.<something>.<something> then that's a DHCP failed address assignment and it's not a real address. A real address is typically 192.x.y.z, or 10.x.y.z, but there are others. The "self" address is 127.0.0.1 which means "loopback", you can ping that address to verify that your IP stack is running at all.

If you have a local IP problem, then you need to resolve that before you can talk to that remote system. If your system is fine from an IP and network connection status, then perhaps you cannot reach the remote system. Ping that system's IP address, and also try ping -R to show the route.

Hi, i have checked ifconfig , my internet connection is fine.
my server and my desktop are on the same network
in fact, i am able to ssh 192.168.1.136 . but unable to showmount
any helps pls?

chrism01 · 10-21-2012, 11:33 PM

Check the firewall at both ends

Code:

 cat /etc/sysconfig/iptables

On the server end

Code:

service nfs status 

exportfs -v 

rpcinfo -p

showmount -e localhost

slowerogue · 10-22-2012, 12:32 AM

Quote:

Originally Posted by chrism01

Check the firewall at both ends

Code:

 cat /etc/sysconfig/iptables

On the server end

Code:

service nfs status 

exportfs -v 

rpcinfo -p

showmount -e localhost

desktop

Code:

# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT

server

Code:

# Firewall configuration written by system-config-firewall

# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
-A INPUT -m state --state NEW -m tcp -p tcp --dport 2049 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 111 -j ACCEPT

COMMIT
#-A RH-Firewall-1-INPUT -m state --state NEW -m tcp --dport 111 -j ACCEPT
#-A RH-Firewall-1-INPUT -m state --state NEW -m tcp --dport 2049 -j ACCEPT

Quote:

service nfs status

Code:

rpc.svcgssd is stopped
rpc.mountd (pid 3670) is running...
nfsd (pid 3735 3734 3733 3732 3731 3730 3729 3728) is running...
rpc.rquotad (pid 3666) is running...

exportfs -v

Code:

/share        	<world>(rw,wdelay,root_squash,no_subtree_check)

rpcinfo -p

Code:

 program vers proto   port  service
    100000    4   tcp    111  portmapper
    100000    3   tcp    111  portmapper
    100000    2   tcp    111  portmapper
    100000    4   udp    111  portmapper
    100000    3   udp    111  portmapper
    100000    2   udp    111  portmapper
    100024    1   udp  54283  status
    100024    1   tcp  45474  status
    100011    1   udp    875  rquotad
    100011    2   udp    875  rquotad
    100011    1   tcp    875  rquotad
    100011    2   tcp    875  rquotad
    100005    1   udp  52084  mountd
    100005    1   tcp  57991  mountd
    100005    2   udp  56598  mountd
    100005    2   tcp  46081  mountd
    100005    3   udp  39469  mountd
    100005    3   tcp  46283  mountd
    100003    2   tcp   2049  nfs
    100003    3   tcp   2049  nfs
    100003    4   tcp   2049  nfs
    100227    2   tcp   2049  nfs_acl
    100227    3   tcp   2049  nfs_acl
    100003    2   udp   2049  nfs
    100003    3   udp   2049  nfs
    100003    4   udp   2049  nfs
    100227    2   udp   2049  nfs_acl
    100227    3   udp   2049  nfs_acl
    100021    1   udp  60689  nlockmgr
    100021    3   udp  60689  nlockmgr
    100021    4   udp  60689  nlockmgr
    100021    1   tcp  36523  nlockmgr
    100021    3   tcp  36523  nlockmgr
    100021    4   tcp  36523  nlockmgr

showmount -e localhost

Code:

Export list for localhost:
/share *

i have added some port on iptables but dontknow whether it is correct or not
thanks

chrism01 · 10-22-2012, 05:54 AM

Re iptables; its a first match system, so on the INPUT chain, the REJECT rule must come last

Code:

-A INPUT -m state --state NEW -m tcp -p tcp --dport 2049 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 111 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited

-A FORWARD -j REJECT --reject-with icmp-host-prohibited

you'll need

Code:

service iptables restart

after changing that file.
Technically its not really a service, but its treated like one...

slowerogue · 10-22-2012, 09:59 PM

hi chrism01
i have move the input above of reject already
and i have restart the table
but still unable to showmount -e
but now i am able to rpcinfo -p 192.168.1.136