We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

NFS Access setup

mehranalmasi
mehranalmasi asked
on
Medium Priority
686 Views
Last Modified: 2012-06-27
Hello...
I have three Linux boxes - l1, l2 and l3.
l1 is making three directories available using this exports file:
/z1      10.50.1.0/24(rw,anonuid=509,anongid=600)
/z2      10.50.1.0/24(rw,anonuid=509,anongid=600)
/z3      10.50.1.0/24(rw,anonuid=509,anongid=600)
#/z1      10.50.1.0/24(rw,anonuid=509,anongid=600) 10.50.2.0/24(rw,anonuid=509,anongid=600)
#/z2      10.50.1.0/24(rw,anonuid=509,anongid=600) 10.50.2.0/24(rw,anonuid=509,anongid=600)
#/z3      10.50.1.0/24(rw,anonuid=509,anongid=600) 10.50.2.0/24(rw,anonuid=509,anongid=600)

I can open and write to nfs mounted directories when logged into l2 with this fstab file:
# This file is edited by fstab-sync - see 'man fstab-sync' for details
/dev/VolGroup_ID_14268/LogVol1 /                       ext3    defaults        1 1
LABEL=/boot             /boot                   ext3    defaults        1 2
none                    /dev/pts                devpts  gid=5,mode=620  0 0
none                    /dev/shm                tmpfs   defaults        0 0
none                    /proc                   proc    defaults        0 0
none                    /sys                    sysfs   defaults        0 0
/dev/VolGroup_ID_14268/LogVol2 /tmp                    ext3    defaults        1 2
/dev/VolGroup_ID_14268/LogVol5 /usr                    ext3    defaults        1 2
/dev/VolGroup_ID_14268/LogVol4 /var                    ext3    defaults        1 2
/dev/VolGroup_ID_14268/LogVol0 swap                    swap    defaults        0 0
/dev/VolGroup_ID_14268/LogVolHome /home                ext3    defaults        1 2
# LABEL=/home-7612             /home                   ext3    defaults        1 2
sierra:/z1      /sierra/z1      nfs      bg,soft,intr      0      0
sierra:/z2      /sierra/z2      nfs      bg,soft,intr      0      0
sierra:/z3      /sierra/z3      nfs      bg,soft,intr      0      0
/dev/hda                /media/cdrom            auto    pamconsole,fscontext=system_u:object_r:removable_t,exec,noauto,managed 0 0

The problem is when I copied the fstab part from l2 that starts with sierra and pasted it into fstab of l3 and mounted them from l1 to l3, I can open the files but can not write to them when logged into l3.

what should be looking into to fix?

thanks in advance.


Comment
Watch Question

Artysystem administrator
Top Expert 2007

Commented:
run 'id' command on l3 (from that user, who is not able to write files on nfs share):
and post output here

Commented:
what are the IP addresses of the machines?

What is the error message?

when it fails, report the IDS (as above) and paste the outputof
touch foo
Also do:
ls -ld .
wherever we're trying to write.

Author

Commented:
id
uid=605(username) gid=602(ae) groups=602(ae) context=user_u:system_r:unconfined_t

ip address of l3 is 10.50.1.31

touch foo
touch: cannot touch 'foo': permission denied

ls -ld
drwxr-xr-x 50 702 700 4096 mar 27 17:22

Author

Commented:
Hi
I found the problem. The user did not belong to the write group. here is the configuration and you will get the points if you explain to me the mechanics of this setup in L2 and L3:

group in /etc
av:/x/700:user1

passwd in /etc
av:/x:700:700:av:/home/nfs:sbin/nologin

ls -l when in sierra:
drwxrwxr-x 11  av  av  4096 Mar 30 16:36 z1
same thing for z2 and z3


thanks.





system administrator
Top Expert 2007
Commented:
Try to append user1 who cannot write to /etc/group on L1 (where share is located):
av:*:700:user1

this appends that user to additional group (which is checked when accessing local to L1 files).

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.