NFS Permissions Help

Added by Luke Evans 11 months ago

I am currently evaluating NexentaStor to but I'm having some difficulty understanding NFS permissions that I could really do with some help on.

I have created a volume and folder. This shows up on a client fine, I can mount, write, etc. But as the default is anonymous, I don't have any ownership information.

So I go into the NFS edit and turn off both anonymous check boxes, and as suggested put into Read-Write any of below (I have tried testing them all but with no luck)

10.x.x.x host.domain.local host 10.x.x.x/8

If I try adding several of these at one time I separate them out with a colon as suggested in the NMS (Specify Read-Write access list. Overrides the 'Read-Only' field for the clients specified. The list contains zero or more colon-delimited netgroups, hosts and/or networks/subnets, for instance: netgroup-engineering:@10.16.16.92:nas1.local.net:@192.168.0.1:@192.168.1.0/24.

But if I do that, all I get on the clients trying to mount it now is permission denied.

I have tried changing the NFS version to 3 but still receive the same error!

Can anyone help me to better understand where I'm going wrong on this one?

I have checked the NexentaStor manual, searched the forums and checked the wiki but I'm unable to find anything on how to manage this. Is there any more documentation out there on this?

I would really appreciate any help/pointers as to getting this working as it's driving me mad!


Replies

RE: NFS Permissions Help - Added by Jan Kuipers 11 months ago

Luke Evans wrote:

Can anyone help me to better understand where I'm going wrong on this one?

The easiest way to check out (on the client side) what is being exported, is asking it :

jen4:~# /sbin/showmount -e nx1
Export list for nx1:
/volumes/tank/export/frop   @192.168.99.0/24,@172.16.13.0/24

What's the exact line you're using ?

  • Jan

RE: NFS Permissions Help - Added by Luke Evans 11 months ago

Thanks Jan.

I have checked what's been exported and it shows:

showmount -e zfs Export list for zfs:

/volumes/zfs/vms @192.168.2.0/24 /volumes/zfs/software @192.168.2.100

$ sudo mount zfs:/volumes/zfs/software ~/software/ mount.nfs: access denied by server while mounting zfs:/volumes/zfs/software

The IP of the machine I'm trying to mount with should meet both of the conditions above. so I'm not entirely sure where I'm going wrong!

RE: NFS Permissions Help - Added by Luke Evans 11 months ago

Just following up on this and I have now seen the following in the log:

Jun 7 12:34:25 ZFS nfssrv: [ID 734524 kern.notice] NOTICE: nfs_server: client machine (192.168.2.100) sent wrong authentication for /volumes/zfs/software

Does anyone know what auth I should specify from an Ubuntu client to get this up and running?

RE: NFS Permissions Help - Added by Linda Kateley 11 months ago

What version of nfs are you using? This looks suspiously like nfs v4 error.

RE: NFS Permissions Help - Added by Luke Evans 11 months ago

Hi all,

Thanks for getting back to me.

I have tested this on both NFS v3 and v4 and I see the same error on both.

Any ideas on troubleshooting this?

Thanks!

RE: NFS Permissions Help - Added by Linda Kateley 11 months ago

I would probably start by opening everything up and working backwards. Look at the permissions on the /volumes/zfs/software to see who the owner is.

I think this is probably an ownership problem. My guess is that directory is being owned by root.

RE: NFS Permissions Help - Added by Luke Evans 11 months ago

Thanks Linda. I appreciate any help I can get!

I have checked the ownership on the directory by dropping to a bash shell and I got the following:

drwxr-xr-x 5 root root 5 Jun 7 15:29 software

Who should this be owned by? I created the above folder using the NexentaStor Web Interface and to test further I created another new folder via NMC and it ended up with the following ownership:

drwxr-xr-x 2 root root 2 Jun 8 16:09 nfs

RE: NFS Permissions Help - Added by Linda Kateley 11 months ago

I would think the directory should be owned by the user. Let me do some testing on my own box.

An easy test would be to #chown -R user software to see if that's the hang up

RE: NFS Permissions Help - Added by Luke Evans 11 months ago

Thanks Linda.

So the run down would be:

Create folder via NMS/NMC Then enable NFS via NMS/NMC. Untick Anon and then specifying the IP, Host, Netgroup or Subnet for RW or RO. After this drop out of the NMC to expert mode and chown the folder to the user on the other machine?

Is there a how to or step by step for NFS for NexentaStor like there is for CIFS and the user guide?

Thanks!

RE: NFS Permissions Help - Added by John Toshak 11 months ago

I'm in a similar, but in a way worse, situation. I cannot get the NFS share to work under OS X. A simple, down to the point guide would be welcome!!! I'm losing my mind over this.