We do have a directory structure - /ifs/PQ/RS on isilon. There is an export created on RS and it was mounted on Unix client. Till now its good and the file system owner is able to access the files from RS directory but the real problem - user is also able to access contents of PQ when he does 'cd ..' The root squash is mapped to nobody. I could not think of where the issue is!. It is happening only on some of the exports/mounts. Has anyone faced this problem. Our Onefs is 7.2
The following command will check all the nfs exports.
# for i in `isi nfs exports list --no-header --no-footer |awk '{print $1}'`; do isi nfs export view $i |egrep " ID|Path|All Dirs"; echo "-----------------------------------------------";done
Wondering about an export on a higher level directory above RS having this setting enabled allow you to transverse up the directory path.
Also what Version of NFS are you using, would need to know pending the outcome of the above information.
Looks like the client is broken in the first place... which flavor of UNIX is it? Any chance to get support for the client side, like analyzing the sent NFS network packets?
Stdekart
104 Posts
3180
0
Posted December 16th, 2015 08:00
swi,
Working with some of my colleagues,
I would look into the "
The following command will check all the nfs exports.
# for i in `isi nfs exports list --no-header --no-footer |awk '{print $1}'`; do isi nfs export view $i |egrep " ID|Path|All Dirs"; echo "-----------------------------------------------";done
Wondering about an export on a higher level directory above RS having this setting enabled allow you to transverse up the directory path.
Also what Version of NFS are you using, would need to know pending the outcome of the above information.
Shane