NFS permission denied HP-UX 11.11 perms change after mount

[Bonnie Temple]

Created through SAM and mounted NFS /11tmp on HP-UX 11.11. 11tmp is located on a Windows server s11. Can access from Windows side but not from HP-UX side.
as root
# cd /11tmp
sh: /11tmp: Permission denied.
You have mail in /var/mail/root

2 drwx------ 2 root root 64 Aug 6 09:25 11tmp

unmounted /11tmp and chmod 777 and chgrp sys
But when we mounted it perms changed back to
drwx------ which seem like it should still work for root user.
Current perms are:
2 drwx------ 2 root sys 64 Aug 6 09:25 11tmp

#rpcinfo -p shows nfs and mountd running

Tried a few things in exports file but no help.
Current /etc/exports
/tmp -anon=65534
/ -anon=65534
/rd/icverify -anon=65534,root=charge
/home -anon=0
/var/tmp -anon=65534,root=XXX.XXX.xxx.xxx
#/hold/taxware -anon=65534,async
/rd/taxware/tkout -anon=65534

hostname of windows server in /etc/hosts

Setup user root on windows server
Windows perms on that nfs share are allow anonymous, rw from HP-UX IP and hostname, all machines, deny. allow root access, encoding ANSI, allow anonymous UID=0, GID=3 because as root #id uid=0(root) gid=3(sys) groups=0(root),1(other),2(bin),4(adm),5(daemon),6(mail),7(lp),20 (users)
We also tried setting GID=0.

Thanks for any help.

[inukoti]

try to use samba in mounting windows shared directories on HPUX

[Bonnie Temple]

We figured this out. Paths and settings needed in NFS on windows server for users/groups. Thank you.

[Viktor Balogh]

>unmounted /11tmp and chmod 777 and chgrp sys
But when we mounted it perms changed back to
drwx------ which seem like it should still work for root user.

change the permissions without umounting it. if you umount it, the chmod command modifies the permissions on the mount point. with mounted, chmod modifies the root inode (inode 2) of the filesystem which is mounted.

[Steven Schweda]

> unmounted /11tmp and chmod 777 and chgrp sys

If you could change the permissions of
something on your own client, and then be
able to write something on the server, then
NFS would open up whole new vistas of
insecurity. Fundamentally, the permissions
of things on the server are determined on the
server. (Which is why there's all that
user-mapping stuff between client and
server.)

[Bonnie Temple]

Thanks for all the help. We have it working now.