Start a Conversation

Unsolved

This post is more than 5 years old

3577

November 27th, 2017 07:00

NFS is read only through Windows Server

I created an NFS share on my VNX5400 and present it to a Windows Server 2012. The server can access it but can't write although I put it in the Read/Write and in the root list. I changed the parameters so the NFS could be accessed anonymously with the option anon=0 now it's working. but I need to find another solution. The environment is critical and we don't tolerate the server to be accessed anonymously.

Would someone be able to help please ?

November 28th, 2017 04:00

Thanks Rainer,

I am using IP @ and here is the command I launched :

server_export server_2 -P nfs -option anon=0,rw=10.184.165.166,root=10.184.165.166 /test_NFS_MS/test_NFS_MS

and here is the output of this command : server_export server_2 -list

export "/test_NFS_MS/test_NFS_MS" rw=10.184.165.166 root=10.184.165.166 anon=0

8.6K Posts

November 28th, 2017 04:00

if anon=0 works then putting the server into rw+root has to work as well

Most likely you made a mistake in the export

are you using a name or an IP there ?

most likely resverse lookup for the name doesnt work or the server is using a different IP than you thought

8.6K Posts

November 28th, 2017 06:00

then most likely the client is using a different IP

take a network trace you should quickly see what IP is used and which UID is sent over the wire

8.6K Posts

November 28th, 2017 07:00

Also check which users Windows is mapping to anon and which to root

This is how it work on a Unix/Linux NFS client:

NFS client just sends the NFS request with the users UI/GID to the NFS server - no mapping

on the NFS server:

if the client IP/name is in the root=list then the request gets handled with root access rights

if the client is not in the root= list the NFS server remaps root uid 0 to anon uid 65535

if anon=0 is set for the exports than for any NFS request anon is mapped back to root

if no anon=0 then the requests with anon are evaluated against the others in the owner-group-others rights

IF Windows is mapping other users than root to anon then just using root= wont work

Then you need to configure the user mapping in Windows

see the Windows NFS client documentation for details

8.6K Posts

November 30th, 2017 01:00

clear ?

December 1st, 2017 00:00

To be honest not that much. I'm not that savy with windows server. Thank you anyway I'll look more in depth. Thanks.

8.6K Posts

December 6th, 2017 02:00

Windows NFS client info is readily available from Microsoft support web sites

No Events found!

Top