NFS issue

[Benoy Easaw]

Hi All,

Please see the below auto_master & auto.direct files

Host01:/etc# cat auto_master
/net -hosts -nosuid,soft,nobrowse
/- /etc/auto.direct

Host01:/etc# cat auto.direct
/usr/sap/r3_trans -vers=3,proto=udp host1:/export/usr/sap/r3_trans
/sap_interfaces -vers=3,proto=udp host1:/export/sap_interfaces
/hr_interfaces -vers=3,proto=udp host1:/export/hr_interfaces
/home/chkbacs -vers=3,proto=udp host1:/export/home/chkbacs
/vault -vers=3,proto=udp host1:/export/vault
/sap_archive -vers=3,proto=udp host1:/export/sap_archive
/opt/cssap/cs_ap0/data -vers=3,proto=udp host1:/export/opt/cssap/cs_ap0/data
/bw_interfaces -vers=3,proto=udp host1:/export/bw_interfaces
/usr/sap/AP0/portal/share -vers=3,proto=udp host1:/export/usr/sap/AP0/portal/share
/sapmnt/AP0 -vers=3,proto=udp host1:/export/sapmnt/AP0

(Here Host01 and host1 are same system)

My issue is when I try to create any file/directory in any of the filesystems listed in the auto.direct, it creates with the owner nobody:sys. For egs:- /usr/sap/r3_trans .


This happens only when I try to create the files with “root” login.

All other filesystems are working fine. For egs:- In /export/usr/sap/r3_trans files creates with root:sys.

Can some one help me to resolve this issue?

How do I check the setuid of a filesystem?

Thanks,
Benoy Easaw

[Heiner E. Lennackers · Accepted solution]

Hi Benoy,

on host1 you have to change the /etc/exports file. Add the option "root=host01" to the exported file systems.

[Shannon Petry]

As previously mentioned, the fix is to change the export.

By default "root" is treated as nobody unless specified otherwise. Of course this is done to improve security.

The NFS server needs to have "root=host1" added to the export options for that file system. Multiple hosts can be colon separated (root=host1:host2).

NOTE: Adding a "root=" option is extremely insecure, use with caution.

[Benoy Easaw]

I am getting the same error even after updating the /etc/exports file. Is there any other file I need to update?

[Dave Olker]

Hi Benoy,

Did you actually re-export the filesystem or just update the /etc/exports file? Just modifying the file won't do anything to the existing exported filesystem. You would need to un-export and re-export the filesystems to get the changes to /etc/exports to take effect.

# exportfs -uav
# exportfs -av

If things still don't work after that then please attach a copy of your /etc/xtab file so I can see exactly what is exported and how.

Regards,

Dave

[Benoy Easaw]

Thanks for the help, The issue resolved with the above solution