NFS PROBLEM

[Nobody's Hero]

OK I am in a bind here and I need some help please. My boss is about to show me the curb.
I am running samba on the HPUX box, and in order for me to control the permissions correctly on the NT side I need the perms to look like this:

drwxrwx--- 8 root root 75 Aug 28 11:24 fsdev
drwxrwx--- 8 root root 75 Aug 27 11:07 fsprd
drwxrwx--- 8 root root 75 Aug 28 14:46 fstst

770 and root:root
Now all my samba permissions are fine. The users are blocked and allowed to go where they want too.
BUUUUTTT, I nfs these files to another unix system and now, oracle users cant get into the NFS mounts because of the 770 and root:root perms on the system taht is handing out the files. Any ideas here or did I confuse everybody.

Running RedHat9:
/etc/exports file looks like:

/ASU/fstst ihshp15(rw,sync,no_acl,no_root_squash)
/ASU/fsdev ihshp14(rw,sync,no_acl)
/ASU/fsprd ihshp8(rw,sync,no_acl,no_root_squash)
/ASU/hrprd ihshp1(rw,sync,no_acl,no_root_squash) ihshp14(rw,sync,no_acl,no_root_squash)
/ASU/hrpt ihshp1(rw,sync,no_acl,no_root_squash)
/ASU/hrtst ihshp15(rw,sync,no_acl,no_root_squash)
/ASU/hrdev ihshp14(rw,sync,no_acl,no_root_squash)

[Jerome Henry]

But Robert, if shares are 770 root:root, how could another user access it apart from being root ?
Can't you create another group in which root would be along with oracle users ?
(so 770 root:newgroup)

J

[Nobody's Hero]

Thanks, Yes I tried that. I created a new group on each box. Changed perms on NFS server to root:newgroup and on the client I added the user to the new group. Still no luck. Permission denied.

[Jerome Henry · Accepted solution]

Yes, but you also should have :
drwxrwx--- 8 root newgroup 75 Aug 28 11:24 fsdev
drwxrwx--- 8 root newgroup 75 Aug 27 11:07 fsprd
drwxrwx--- 8 root newgroup 75 Aug 28 14:46 fstst

J

[Dave Falloon]

Are you using NIS and automount on your network?

If so check to make sure that your clients are mounting the drives rw and not ro. I made that mistake in my auto.master and it took a long time for me to realize because the exports file was correctly exporting rw and my clients followed the auto.master's ro option.

Also are you having the problem mounting or reading from the mounted drive? It sounds like reading from the mounted drive but I want to make sure. Can you attach the output of this command on the client:

mount

Just to make sure the values are correct.

The client machines get their group information from an NIS map I assume? Make sure the client is reading it. id of the user should show that (s)he is in fact in the group with write permission to the drive. Become the user on the nfs server and verify that you can write to the drives. Once you are sure that the user permissions on the server are correct then its a matter of making the sure the client and server are in sync with each other.

I hope that helps,

Dave