July 20, 2008 02:03am pdt

1. tliotta 45,635
2. murphey2 17,189
3. Gary_The... 16,150
4. _b_h 13,560
5. daveslash 11,000
6. daveslater 7,999
7. rward 6,350
8. Kdo 4,540
9. momi_sabag 3,500
10. mark_wills 2,500
11. bggauth 2,200
12. Infinity08 2,000
13. ajut400 1,200
13. dfke 1,200
15. henjoh09 1,000
15. nobus 1,000
15. jkr 1,000

1. tliotta 99,614
2. _b_h 30,873
3. daveslash 21,052
4. murphey2 19,489
5. Gary_The... 16,150
6. daveslater 15,627
7. rward 9,100
8. bggauth 5,575
9. Kdo 4,940
10. momi_sabag 4,300
11. shalomc 3,370
12. WaldenL 2,900
13. mark_wills 2,500
14. twahelpdesk 2,450
15. Muflone 2,240

04.20.2008 at 11:45AM PDT, ID: 23337991

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.6

as400 will mount nfs share but will not allow access

Zones: AS / 400, Linux

Tags: as400

I created a nfs directory in rhel 5.1 which all of my other linux computers can see and use
when I make a mount on my as400 it mounts just fine.
I can see the mount dir and the first level of directories on the linux box but when I try to open the directories it tells me that I do not have permission to carry out this operation.

I am the admin of the the as400 computer and the nfs drive is shared as all users can read and write.
the line in the /etc/exports file is : /IMSHCS02 192.168.2.1(rw,insecure,insecure_locks,anonuid=0,anongid=0)
I have tried several squash lines in this line.
can't seem to find whether it is the as400 or the linux box that is causing the problem.

strange thing is we have a adeptec server that is running a version of linux and the as400 has no problem with it.

gair

Start your free trial to view this solution

Question Stats

Zone: OS

Question Asked By: javagair

Solution Provided By: tliotta

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
Automotive
New Net Users
New Users

Software
Digital Music
Gaming World
Home Security

Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Displays / Monitors
Handhelds / PDAs
Components
Peripherals
Laptops/Notebooks

Servers
Misc
Apple
Embedded Hardware
Networking Hardware

Storage
Desktops
New Users

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMware
Misc
Web Development

OS
CYGWIN
Voice Recognition
Virtualization
Message Queue
Quality Assurance
Security
Firewalls

MultiMedia Applications
Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals
Devices

Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
Web Computing
WebApplications
IDS
Vulnerabilities
Email Clients
File Sharing

Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Consulting
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMware

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel
Automation

Algorithms
Game
Signal Processing
Project Management
Open Source
Database

Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Web Services

Images
Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration

WebApplications
Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Web Computing

Broadband
Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Lounge
Business Travel
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles
Automotive

Community Support

Suggestions
New to EE
New Topics
CleanUp

Announcements
General
Feedback

Input
EE Bugs

04.20.2008 at 01:08PM PDT, ID: 21397415

Rank: Guru

omarfarid:

Are these subdirs a separate filesystems?

04.20.2008 at 01:28PM PDT, ID: 21397507

javagair:

this is one big dir. with 60 sub dir, and hundreds of sub dir under those and hundreds of scan documents under those.

I can see the 60 but not access any of them.

gary

04.20.2008 at 02:19PM PDT, ID: 21397634

Rank: Guru

omarfarid:

What perms are given on those subdirectories? What are the user ids on those systems that can not access and those that can access the subdirectories?

04.20.2008 at 03:00PM PDT, ID: 21397735

javagair:

permissions on sub dir are the same as the primary dir
the same users are accessing all dir
since it is computer to computer root to root

04.21.2008 at 12:02PM PDT, ID: 21404888

Rank: Master

tliotta:

javagair:

When you say that the "same users" are involved, the critical element is whether or not they have the same UIDs rather than the same user names. NFS works on Unix principles. Note that GID might also be appropriate.

Tom

04.21.2008 at 04:55PM PDT, ID: 21407163

javagair:

tom

how would I tell? I can not find a single log file anywhere that tells me who is trying to access nfs.

04.25.2008 at 06:37PM PDT, ID: 21444165

Rank: Master

tliotta:

javagair:

I'm not sure why I didn't see a notice that you had responded. My apologies for taking so long. I just happened to come back to look at this thread almost by accident.

Okay, now it's not clear what you earlier meant by "the same users are accessing all dir". If they're the 'same' users, it seems that you would know who they were.

Display the users on the local and remote systems to see if their uid/gid attributes match. On the AS/400, the uid is shown usually on the next to last panel when scrolling down.

As for any non-AS/400, you'll have to use whatever method that system expects to determine if the uid there matches a valid uid on the AS/400.

One common problem is that a meaningful uid doesn't get assigned when user profiles are created on AS/400s. Most often, the attribute gets assigned simply by letting the system assign whatever uid is next available. This can be a significant issue when some neighboring system has users with accidentally matching uids and NFS is started between the two systems. If nothing else, it can be a serious security risk.

But AS/400s seldom use NFS. Most sites never realize that they have users with matching uids on different systems simply because the service isn't running.

And then one day... someone starts using NFS...

Tom

Accepted Solution

04.25.2008 at 06:38PM PDT, ID: 21444169

Rank: Master

tliotta:

BTW, you can generate a quick table by running DSPUSRPRF over all users to an output file. You can then query that file to see all uids.

Tom

04.28.2008 at 04:53PM PDT, ID: 21458615

javagair:

ran the method and got a file. there are three number fields and a name field and some ibm packed fields. which number is the uid?

04.28.2008 at 05:12PM PDT, ID: 21458696

Rank: Master

tliotta:

Gair:

I just ran it on a V6R1 system. The result for me has a column labeled "USER ID NUMBER" way out around position 2035 when I use RUNQRY to view the result. If I run DSPFFD over that *outfile, the field name is UPUID and its buffer-position is 1662.

Details might differ on earlier systems. The field name almost certainly hasn't changed for a while.

Tom

05.05.2008 at 03:16PM PDT, ID: 21503476

javagair:

loaded a copy of solaris 10 to an old computer and the nfs and the as400 get along fine. Only redhat seems to have a problem.

gary

05.06.2008 at 07:10PM PDT, ID: 21512690

Rank: Master

tliotta:

Gary:

And how do the uids match up between your RedHat system and your AS/400?

Generally, uids on an AS/400 are generated as large numbers that are unlikely to match ones that may be assigned on other systems. However, _some_ uids are very possibly duplicated; on one system here, QSECOFR is 102, QSYS is 101, QDFTOWN is 102 -- those could easily match up with a Unix or Unix-like system.

It's perfectly possible that your RedHat system simply has no matches and that your other systems match with a profile like QSECOFR or QSYS. And even large, generated numbers can randomly match at times.

Unfortunately, a Linux person (or just RedHat) will have to describe how to view all uids on that platform.

Tom

05.06.2008 at 07:12PM PDT, ID: 21512698

Rank: Master

tliotta:

Correction -- "QSECOFR is 105..."

Tom

05.14.2008 at 10:21AM PDT, ID: 21566526

javagair:

tom

started paging down through the profile and at the bottom you can see the uid.

the answer to the problem is a uid problem but not the actual uid because we are doing nonuid=0 on the linux box which should map everyone to 0. The answer is that IBM has a ptf out that address the problem of not see underling subdirectories. This problem only affects certain os's, which is why sun solaris works. What is odd is that ibm sells redhat systems and has for years and ddn't put this fix in there os. So you were right just that until you load the ptf you are never going to get this to work.

gary

05.14.2008 at 05:52PM PDT, ID: 21569860

Rank: Master

tliotta:

Gary:

I can only recommend that (1) this be well tested from systems that you don't expect to be accessing the mount, and (2) everyone is clear about what systems can follow a route to reach the mount. E.g., is there a route from my PC here? Would it matter if I (or whoever) accessed the mount?

I'm not at all up on the Linux side of this, so I'll bring myself up on the implications of [nonuid=0] and how it interacts with OS/400 mounts. If I learn anything useful, I'll post back here.

Tom

20080236-EE-VQP-29 / EE_QW_2_20070628