NFS & Solaris

[Spike Burkhardt]

All,

I've got a really confusing problem. I am exporting a directory from a Solaris 8 machine to a HP-UX 11 system. This directory is being exported read only. These systems are in two different NIS domains that don't come anywhere close to matching. The local mount point is /engdb3 with permissions of 777 with root:tcgrp as the owner & group. When I try to mount the exported file system on the HP-UX system there is no problem but it does change protection and ownership to 770 root:115. When I do a "ls" as root I get a message "unreadable". I have one username in tcgrp and that is burkharr. When logged in as burkharr and try to do a ls /engdb3 I get a error message "ls: /engdb3: Permission denied"

In the /var/adm/messages on the HP-UX box, I see the following message:
"Jul 12 15:34:59 tapsflt vmunix: NFS fsstat failed for server draco: RPC: Authentication error"

In the /var/adm/message on the Solaris 8 box, I see the following message:
"Jul 12 15:30:20 altair mountd[5483]: [ID 770583 daemon.error] tapsflt.ssd.loral.com denied access to /projects/t_and_c/tc_rel"

Can anyone help me out? TIA.

spike

[Sundar_7]

1) root in HP-UX will be assigned the privileges of nobody (-2) in solaris - that explains the "unreadable" error.

Try this

in Solaris

# exportfs -iv -o root=hpuxserver /engdb3

Now login as root in HP-UX, unmount & mount the export and try again

2) Looks like the GID of the group tcgrp is different in SUN and HP-UX machine.

Sync up the GID and try again.

[Geoff Wild]

Did you grant access to the HP system in /etc/dfs/dfstab on Solaris?


Rgds...Geoff

[Spike Burkhardt]

Sundar,

You've basically solved my problem :-)))) Maybe I don't fully understand your answer. In your exportfs command you specify root access. How do I specify read-only access?

spike

[Sundar_7 · Accepted solution]

Spike,

this is how u specify read-only access

In solaris

# exportfs -iv -o root=hpuxserver,ro /engdb3

the above command will export the file system in read-only mode.

if you would like to restrict the clients who can mount the NFS export then

# exportfs -iv -o root=hpuxserver,ro,access=hpuxserver1:server2:server3 /engdb3

The above command will export the fs in readonly mode ONLY to nodes hpuxserver1, server2 and server3 with root privileges to root of hpuxserver.

[Geoff Wild]

Sundar has it.

For reference, check out:

http://www.uwsg.iu.edu/usail/network/nfs/admin.html

http://docs.hp.com/cgi-bin/onlinedocs.py?mpn=B1031-90054&service=hpux&path=00/00/1&title=NFS%20Services%20Administrator%27s%20Guide

Rgds...Geoff

[Spike Burkhardt]

Geoff,

thanks for the references. They look very good.

spike