main logo
Subject: Re: [ProLinux] nfs rights
Author: Carl Karsten
Posted: 2006/12/30 18:52:11
 
View Entire Thread
New Search


> files. For each user that needs access to the myapplication directory
> via a mount, you would need to be sure that the myappgroup existed on
> the client computer and that the user was assigned as a member of the
> myappgroup group. The myappgroup group ID number on the client should
> agree with the myappgroup ID number on the server. This would give the
> user rwx permissions to the mounted directory.

I am guessing it is the ID's that are hosing me.

As a hack, I made the dir world writeable, and duh... I can write to it.

What is the right way to do this?

details of my tests.

server: e18 - linux
clients: cnt550 (linux), adocentyn (mac)

* OS version details:
juser (at) e18:~$ uname -a
Linux e18 2 .D.O.T 6.17-10-generic #2 SMP Fri Oct 13 18:45:35 UTC 2006 i686 GNU/Linux

juser@cnt550:~$ uname -a
Linux cnt550 2.6.17-10-386 #2 Fri Oct 13 18:41:40 UTC 2006 i686 GNU/Linux

adocentyn:~ carl$ uname -a
Darwin adocentyn.personnelware.com 8.8.0 Darwin Kernel Version 8.8.0: Fri Sep 8
17:18:57 PDT 2006; root:xnu-792.12.6.obj~1/RELEASE_PPC Power Macintosh powerpc

* user and group IDs:

juser@cnt550:~$ id
uid=1000(juser) gid=1000(juser)
groups=4(adm),20(dialout),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),109(lpadmin),111(scanner),114(admin),1000(juser)

juser@e18:~$ id
uid=1000(juser) gid=1000(juser)
groups=4(adm),20(dialout),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),109(lpadmin),111(scanner),114(admin),1000(juser)

adocentyn:~ carl$ id
uid=502(carl) gid=502(carl) groups=502(carl), 81(appserveradm),
79(appserverusr), 80(admin)

* server setup
juser@e18:~$ cat /etc/exports
/home/juser adocentyn(rw,sync,insecure) cnt550(rw,sync,insecure)

juser (at) e18:~$ sudo exportfs -av
exporting adocentyn .D.O.T personnelware.com:/home/juser
exporting cnt550.personnelware.com:/home/juser

juser@e18:/$ ls -ld / /home/ /home/juser/
drwxr-xr-x 21 root root 4096 2006-12-11 18:11 /
drwxr-xr-x 3 root root 4096 2006-12-11 18:35 /home/
drwxr-xr-x 2 juser juser 4096 2006-12-30 17:00 /home/juser/


* cnt550 client setup:
juser@cnt550:~$ grep e18 /etc/fstab
e18:/home/juser /mnt/nfs/e18/juser nfs user,soft,noauto,defaults 0 0
juser@cnt550:~$ ls -ld /mnt/nfs/e18/juser
drwxr-xr-x 2 root root 4096 2006-12-30 17:38 /mnt/nfs/e18/juser
juser@cnt550:~$ mount /mnt/nfs/e18/juser
juser@cnt550:~$ touch /mnt/nfs/e18/juser/x
juser@cnt550:~$ ls -l /mnt/nfs/e18/juser/x
-rw-r--r-- 1 juser juser 0 2006-12-30 17:40 /mnt/nfs/e18/juser/x

adocentyn:~ carl$ sudo mount e18:/home/juser nfs/e18/juser/
adocentyn:~ carl$ ls -l nfs/e18/juser
-rw-r--r-- 1 1000 1000 0 Dec 30 17:40 x

adocentyn:~ carl$ touch nfs/e18/juser/y
touch: nfs/e18/juser/y: Permission denied

Ok, hack to make it work:
juser@e18:/home$ chmod 777 juser/

adocentyn:~ carl$ touch nfs/e18/juser/yadocentyn:~ carl$ ls -l nfs/e18/juser/y
-rw-r--r-- 1 carl carl 0 Dec 30 17:48 nfs/e18/juser/y

(yay!)

Carl K



 
©2006 Carl Karsten
<-- Prior Message New Search Next Message -->