Re: *nfs-rw-uids*
Ahmon Dancy <[email protected]> Thu, 06 Nov 2003 14:09:13 -0800
| Newsgroups | gmane.lisp.open-source.franz |
|---|---|
| Message-ID | <7801.1068156553@dancy> |
Cc'ing the opensource mailing list so that others may benefit from
this information.
---
Hi Mark,
This is definitely a confusing issue. In fact, it confused me into
thinking I had made a programming error in the implementation of
*nfs-rw-uids*.
First things first, Allegro nfsd _will_ properly honor write
requests made by NFS clients. The reason your write requests are
being denied is that the NFS client is deciding that the write will
never succeed due to the permission settings on the file/directory in
question... so it never sends the request to the NFS server.
Here's an example that probably closely mirrors your scenario.
Let's say the NFS client has the exported filesystem mounted on /mnt.
Unless you've made arrangements in your nfs.cfg file, the "ls -ld
/mnt" command will probably display something like this:
# ls -ldn /mnt
0 drwxr-xr-x 1 1000 50 0 Jan 1 1980 /mnt/
^^ perms ^^ userid ^^ groupid
What's important here are the permissions bits for the directory.
"rwxr-xr-x" indicates that user id 1000 has read/write/execute
permission, group id 50 has read/execute permssion, and everyone else
also has read/execute permission. The NFS client recognizes these
permissions and if someone other that user id 1000 attempts to create
a file in /mnt, the client will say "this isn't allowed and I'm not
even going to ask the NFS server" and then responds with a Permission
Denied error code.
To remedy this, the NFS server needs to be configured so that it
reports open permissions on all files and directories so that the
client will pass all requests to the NFS server. The NFS server will
enforce security when it gets those requests.
You can make the NFS server report open permissions by adding
something like this:
(*nfs-set-mode-bits* #o666)
to your nfs.cfg file. Using #o666 means that the NFS server will
always report that all files/directories are read/write access for any
user id.
Let me know how it goes. I'll update the documentation with this
discussion in the meantime.
>> Greetings,
>>
>> I am attempting to allow more than one uid r/w access to a directory
>> on a Windows XP machine running Allegro NFSd and not having much luck.
>> My impression from reading the newsgroup is that this is now supported. ?
>>
>> Perhaps I am not specifying the list of uids correctly in the nfs.cfg
>> file.
>> What is the correct syntax of *nfs-rw-uids* with multiple uids?
>>
>> Of course, as long as the uid I'm mounting from exactly matches the
>> *nfslocaluid* value,
>> r/w works OK. But I'd like to allow r/w access for more than one uid if
>> possible.
>>
>> Any input would be appreciated.
>> Thanks in advance,
>>
>> Mark A. Johnson