UNSOLVED

Mohamed Achraf MAAZOUN

updated

9 years ago

0

3724

November 27th, 2017 07:00

NFS is read only through Windows Server

I created an NFS share on my VNX5400 and present it to a Windows Server 2012. The server can access it but can't write although I put it in the Read/Write and in the root list. I changed the parameters so the NFS could be accessed anonymously with the option anon=0 now it's working. but I need to find another solution. The environment is critical and we don't tolerate the server to be accessed anonymously.

Would someone be able to help please ?

  • 2995

    0

    Posted November 28th, 2017 04:00

    Thanks Rainer,

    I am using IP @ and here is the command I launched :

    server_export server_2 -P nfs -option anon=0,rw=10.184.165.166,root=10.184.165.166 /test_NFS_MS/test_NFS_MS

    and here is the output of this command : server_export server_2 -list

    export "/test_NFS_MS/test_NFS_MS" rw=10.184.165.166 root=10.184.165.166 anon=0

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    2995

    0

    Posted November 28th, 2017 04:00

    if anon=0 works then putting the server into rw+root has to work as well

    Most likely you made a mistake in the export

    are you using a name or an IP there ?

    most likely resverse lookup for the name doesnt work or the server is using a different IP than you thought

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    2995

    0

    Posted November 28th, 2017 06:00

    then most likely the client is using a different IP

    take a network trace you should quickly see what IP is used and which UID is sent over the wire

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    2995

    1

    Posted November 28th, 2017 07:00

    Also check which users Windows is mapping to anon and which to root

    This is how it work on a Unix/Linux NFS client:

    NFS client just sends the NFS request with the users UI/GID to the NFS server - no mapping

    on the NFS server:

    if the client IP/name is in the root=list then the request gets handled with root access rights

    if the client is not in the root= list the NFS server remaps root uid 0 to anon uid 65535

    if anon=0 is set for the exports than for any NFS request anon is mapped back to root

    if no anon=0 then the requests with anon are evaluated against the others in the owner-group-others rights

    IF Windows is mapping other users than root to anon then just using root= wont work

    Then you need to configure the user mapping in Windows

    see the Windows NFS client documentation for details

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    2995

    0

    Posted November 30th, 2017 01:00

    clear ?

  • 2995

    0

    Posted December 1st, 2017 00:00

    To be honest not that much. I'm not that savy with windows server. Thank you anyway I'll look more in depth. Thanks.

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    2995

    0

    Posted December 6th, 2017 02:00

    Windows NFS client info is readily available from Microsoft support web sites