--------------------------------------------------------------------------------
                     ID: 2
                  Paths: /ifs/data/w2isilonpoc/nfs/sph
            Description: SPH NFS4 test
                Clients: 10.231.10.194
           Root Clients: 10.231.10.194
      Read Only Clients: -
     Read Write Clients: 10.231.10.194
     Unresolved Clients: -
               All Dirs: Yes
             Block Size: 8.0K
           Can Set Time: Yes
    Commit Asynchronous: No
Directory Transfer Size: 128.0K
               Encoding: DEFAULT
         Map Lookup UID: No
              Map Retry: Yes
                Map All
                       User : -
                     Groups : -
               Map Root
                       User : root
                     Groups : -
               Map Full: Yes
          Max File Size: 8192.00000P
              Read Only: No
            Readdirplus: Yes
   Readdirplus Prefetch: 10
  Return 32Bit File Ids: No
 Read Transfer Max Size: 1.00M
 Read Transfer Multiple: 512
     Read Transfer Size: 128.0K
          Security Type: unix
   Setattr Asynchronous: No
               Symlinks: Yes
             Time Delta: 1e-09
  Write Datasync Action: datasync
   Write Datasync Reply: datasync
  Write Filesync Action: filesync
   Write Filesync Reply: filesync
  Write Unstable Action: unstable
   Write Unstable Reply: unstable
Write Transfer Max Size: 1.00M
Write Transfer Multiple: 512
    Write Transfer Size: 512.0K

w2isilonpoc-3# isi nfs settings global view
Lock Protection Level: 2
        NFSv2 Enabled: Yes
        NFSv3 Enabled: Yes
         NFSv4 Domain: localdomain
        NFSv4 Enabled: Yes
  NFS Service Enabled: Yes

Hi Mark,

nothing in /var/log/nfs.log

Based on your description there is no obvious reason why it should return access denied.

An error should be logged in /var/log/nfs.log on the node you've attempting to mount

Can you share your isi nfs exports list -v

and isi nfs settings global view

Does the host mounted have a rsize/ wsize restriction? Asking since NFS v4 is very temperamental. And, probably can check if jumbo frames are turned on (off by default)

Can you change rsize and wsize - on the host - will need to unmount the share and remount for this to take effect. I usually try with 32768 for this with NFSv4 and it comes up good some times.

no jumbo frames, tried with rsize 32768 but no dice

[root@ ~]# mount -t nfs4 -o proto=tcp,rsize=32768,wsize=32768 isilon:/ifs/data/w2isilonpoc/nfs/sph /mnt

mount.nfs4: access denied by server while mounting isilon:/ifs/data/w2isilonpoc/nfs/sph

Ok, at least we can cross that option as tried.

What does /etc/exports show on the host?

Is that mount a hard or a soft mount?

Can you check /etc/fstab for verification?

Can you stop and restart the NFS service?

In the meantime, can you unmount and remount the share on the host?

Also, can you try these couple of other options - all on the host?

/etc/idmap.conf to see if it includes "localdomain" in its end as well

I am sure you already have, but please check for some more settings on the host from here - nfsv4 mounts files as nobody  and here christopherBANCK: configuring Isilon for kerberized NFSv4

Also, from the RHEL notes (6.5 Technical Notes), this might be something to check as well -

nfsd.nfs4_disable_idmapping

The default value of this parameter is 0. When set to 1, NFSv4 server returns only numeric user IDs (UIDs) and group IDs (GIDs) to clients using AUTH_SYS mode, and will accept numeric UIDs and GIDs from such clients. This facilitates migration from NFS version 2 to NFS version 3.

w2isilonpoc-3# isi nfs settings global view 

         NFSv4 Domain: localdomain 

Does this match the NFSv4 domain setting on the client?

man idmapd.conf

Peter,

where do i configure NFSv4 domain name on the client ? (RHEL 6.5)

Just plain works with OneFS 6.5 and RHEL4+5.

Tested (again right now), though not used in production (no HA).

Will check with OneFS 7.1 on virtual nodes later.

Thank you Peter

so i set it to localdomain and bounced the server, still not working. There must be additional configuration on the client that i am missing ?

[root@~]# cat /etc/idmapd.conf

[General]

#Verbosity = 0

# The following should be set to the local NFSv4 domain name

# The default is the host's DNS domain name.

#Domain = local.domain.edu

Domain = localdomain