NFS from HP-UX 11.11 to 11.23 and root access

[Andre Braganca]

Hi, I'm having problems with the permissions for user root on a NFS client, an Itanium with HP-UX 11.23. The NFS server is a rp5470 with HP-UX 11.11.

There are other clients for the same filesystem, with HP-UX 11.0, where things work well. Also, an export from a 11.0 server works correctly on the 11.23.

The permissions on the exported directory
are 775. What happens is that on the 11.23 user root cannot write there. It's like if it was a "other", even though it belongs to the "group" (the gid is the same as that of the directory).

The exportfs on the 11.11 is this:

/sapmnt/P00 -root=axp2:axp4:axp5, access=axp2:axp4:axp5

where "axp5" is the 11.23 and "axp2" and "axp4" are the 11.0.

I'm not sure if the problem is on the 11.11 or on the 11.23. Could this be a bug ?

Thanks for your help,
Andre'

[Andre Braganca]

Forgot to mention that on the client side I use automounter.

P00 PROD APP root://axp5/etc# cat auto_master
/net -hosts -nosuid,soft,nobrowse
/- /etc/auto.direct
P00 PROD APP root://axp5/etc# cat auto.direct
/usr/sap/trans axp3:/usr/sap/trans
/sapmnt/AXP6 axp6:/sapmnt/P00

[Stuart Abramson_2]

I'm a little confused on which host is the exporter and which host is the mounter.

We do this, but we don't use "access=", just "root=".

On the "exporter", your export should look like this:

/sapmnt/P00 -root=mounter01:mounter02

Also, verify that both "exporter" and "mounter01" can both recognize the names "exporter" and "mounter01". Use nslookup.

[Andre Braganca]

exporter: host = axp6, oper.sys = HP-UX 11.11
mounter: host = axp5, oper.sys = HP-UX 11.23

No errors on mounting. On axp5 the root user cannot write to the mounted filesystem if permissions are 775 (for example).

[Francois LAURENT]

Hello Andre,

In the passwd file, on the nfs server, have you a "nobody" account ?
I remember root user is viewed as nobody user, and you have to create a nobody user on nfs server like :
nobody:*:-2:60001::/:

hope this help

[Bernhard Mueller]

Andre,

this is from the Jun 2003 Release Notes:

"HP would like to inform you that Automounter will not be supported on HP-UX version 2 (HP-UX 11.23). This notice serves as a reminder that the last HP-UX releases that will support Automounter are HP-UX 11i version 1.0 (11.11) PA-RISC and HP-UX 11i version 1.6 (11.22) IPF. Automounter will continue to be supported on HP-UX 10.20, 11.0 and 11i versions 1.5 and 1.6."

Regards,
Bernhard

[Andre Braganca]

I have, both in the server and client, the entry "nobody:*:-2:-2::/:" in the passwd file and "nogroup:*:-2:" in the group file.

"Automounter" is a (wrong) way of saying it. The configuration in /etc/rc.config.d/nfsconf, for the 11.23 client, is:

AUTO_MASTER="/etc/auto_master"
AUTOFS=1
AUTOMOUNT_OPTIONS=""
AUTOMOUNTD_OPTIONS=""

[Francois LAURENT]

For using autofs, i think you have to set these options too :

AUTOMOUNT=1
AUTOFS=1
AUTO_MASTER="/etc/auto_master"
AUTO_OPTION="-f $AUTO_MASTER"

--> both AUTOMOUNT and AUTOFS must be seted


Is the nfs mount run without automount/autofs ?

Have you this problem between :
the SAME CLIENT and an OTHER SERVER ?
the OTHER CLIENT and an SAME SERVER ?

[Francois LAURENT]

Oops, sorry, i'm wrong in the nfsconf setting, use this :

NFS_CLIENT=1
AUTOMOUNT=1
AUTOFS=1
AUTO_MASTER="/etc/auto_master"
AUTOMOUNTD_OPTIONS="-f $AUTO_MASTER"


Have you ran autofs in debug mode ?
kill -17 pid_automountd
log in /var/adm/automount.log

[Elmar P. Kolkman]

Please check if axp5 reports itself with the short or long name to the exporter, axp6.
You can do this by running this on axp6:
showmount -d
The name before the ':' should exactly match with your exportfs file.

And check you nslookup for the name and IP address of axp5 on axp6.
(nslookup axp5
nslookup
If for some reason the machine is wrongly resolved, the entry of axp5 is not used in root and access parameter settings.