jim7475's questions

(wlan0 -> tun0) Ubuntu desktop "A" (eth0) -> (eth0) other Ubuntu desktop "B"

I have an OpenVPN connection on "A". OpenVPN server is from a Mikrotik RouterBoard.

I need to forward the OpenVPNs network to "B". So that "B" would get an IP from the OpenVPN server via DHCP.

"A" originally got the internet connection from wlan0. The OpenVPN goes through wlan0 to get to the OpenVPN server.

I am physically connecting the two ethX'es. I bring up IP on both ethX in the same subnet.

So on "A" I am doing:

pkill nm-applet
service iptables stop
iptables -t nat -I POSTROUTING -o tun0 -j MASQUERADE
echo '1' > /proc/sys/net/ipv4/ip_forward

But even from tcpdump I cannot see any traffic from "B" to "A" even if I do pings. Why?

In /var/log/kernellog we can see many entries for audit (since we have "space_left_action = SYSLOG" and "write_logs = no"):

...
audit: audit_backlog=32769 > audit_backlog_limit=32768
audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=32768
audit: backlog limit exceeded
...

The Question: Could it be that a server crashes/stops if it cannot process the too much audit infos? FS holding kernellog having enough free space.

We suddenly had a "nobody" issue on NFSv4 mounts on SLES 12.5 machines.

The:

systemctl unmask nfs-idmapd.service
systemctl enable nfs-idmapd.service
systemctl restart nfs-idmapd.service
nfsidmap -c

solved it (+a correct /etc/idmapd.conf), but after a rebooot, we again have to start the idmapd service.

The question: How can we make the idmapd automatically start at boot?

UPDATE:

SERVER:~ # systemctl list-unit-files --type=service nfs-idmapd.service
UNIT FILE          STATE
nfs-idmapd.service static

From https://www.linux.com/training-tutorials/understanding-and-using-systemd/ I can see if a SystemD service is "static" that means it wont start at boot alone, maybe it has some dependency that starts it?