NFS mounted drive access problems

[Lonny Balderston]

Greetings,

I have NFS server enabled on my 5470. Clients are able to drive-mount, but experience access permission problems: cannot see files, can see but cannot copy, cannot write to the mounted disk. /etc/exports:
/var/opt/ignite/clients -anon=2
/opt/app/data/dgn
-rw=alpha.telco.com:lonnyd.telco.com
/ -rw=alpha.telco.com:lonnyd.telco.com

"lonnyd" is NT PC, cannot access files/directories that can be accessed via telnet (using same userid/password). Used following doc to set up: http://docs.hp.com/cgi-bin/onlinedocs.py?mpn=B1031-90048&service=hpux&path=00/00/1&title=Installing%20and%20Administering%20NFS%20Services
"-rw" is supposed to allow read/write access. What is up with this? Thank you.

[Steven E. Protter · Accepted solution]

It is still possible to set file and group permissions so that user can't access the file.

Notes: You are granting access to the root directory / in yoru exportfs file.

That is giving read/right access to the entire MACHINE.

This problem can still be caused by the group membership of lonnyd

Example.

I have a file named /etc/fred

Its owned by root, the permissions on it are 700, which means root can read,write,excute it.

lonnyd can't even see it, because nobody else has acess to it.

The first diagnostic step is to check the actual permissions of the files lonnyd can't see or change.

Then ll -d /dirname for the directories. Again if lonnyd isn't in a priviledged group, this problem could be caused by permissions.

For more help, tell us this:

group id for user lonnyd

ll

on a file lonnyd can't access.

The next hint is that for file access NFS isn't a great tool. Its has bugs, security problems and even still performance issues.

CIFS/9000 samba is a little more robust. It can even be configured to grant permissions based on a NT Primary Domain Controller. It works better with windows.

Software is here:
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B8725AA

Its free.

Setup information is here.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B8725-90003/B8725-90003_top.html&con=/hpux/onlinedocs/B8725-90003/00/00/8-con.html&toc=/hpux/onlinedocs/B8725-90003/00/00/8-toc.html&searchterms=configuration%7cCIFS/9000&queryid=20030527-172640

Last in my hit parade is some documentation on NFS configuration and file permissions.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90742/B2355-90742_top.html&con=/hpux/onlinedocs/B2355-90742/00/00/49-con.html&toc=/hpux/onlinedocs/B2355-90742/00/00/49-toc.html&searchterms=configuration%7cfile%7cpermission%7cNFS&queryid=20030527-172754

Common NFS problems.
http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B1031-90048/B1031-90048_top.html&con=/hpux/onlinedocs/B1031-90048/00/00/42-con.html&toc=/hpux/onlinedocs/B1031-90048/00/00/42-toc.html&searchterms=configuration%7cfile%7cpermission%7cNFS&queryid=20030527-172754


Samba will not help you if you don't have valid file permissions on the files and directories in question.

I hope some of this will help.

SEP

[Kevin Wright]

I have a feeling your UID's are not consistent across systems. You should reconsider exporting / as rw, which is the whole system!

Are you trying to run PC nfs to the NT client? Are the pc nfs daemons running?

[Lonny Balderston]

Thank you! I was able to get functionality by changing mount-point permissions. Root mount only for pre-prod testing, yes, bad news!