NFS(d) configuration...

From: DEMERRE DIETER (EXT.Dieter.Demerre@siemens.be)
Date: Fri Jan 28 2000 - 11:11:11 EST


-----BEGIN PGP SIGNED MESSAGE-----

Hi,

I'm running nfs-server-2.2beta37-1 on my machine
I'm working on a HP-UX workstation running 10.20

On the HP-UX is running an automount which has
in /etc/auto.mount following lines:

>>>/etc/auto.mount>>>
=hp -host -rw,suid,soft
<<</etc/auto.mount<<<

On my linux machine, I'm - as said - running nfsd.
in /etc/exports, we find:

>>>/etc/exports>>>
/home/ftp (ro,insecure,all_squash)
/home/ddemerre/prg/ps_api my_hp.our.domain(rw, secure, \
   no_root_squash, map_static=/etc/nfs/psapi.map, \
   anonuid=99, anongid=99)
/home/ddemerre/prg/ps_api *.our.domain(ro, secure, \
   all_squash, anonuid=99, anongid=99)
<<</etc/exports<<<

In /etc/nfs/psapi.map I put

>>>/etc/nfs/psapi.map>>>
uid 0-103 -
uid 104 1000
uid 1001-65536 -
gid 0-36 -
gid 37 500
gid 38-65536 -
<<</etc/nfs/psapi.map<<<

It's like this:
on HP i have a user with id(gid) == 104(36),
which I would like to map to the uid(gid) 1000(500)

i.e. the user dd (id==104, gid==36) on the HP workstation
should have the permissions on the mounted device
 /hp/anthony/home/ddemerre/prg/ps_api
like the user ddemerre (id==1000,gid==500)
on the linux machine.

With above configuration, I remark that *all* users on
my_hp can access /hp/anthony/home/ddemerre/prg/ps_api
as user ddemerre on that nfs-mount.
what am I doing wrong ?

Besides in /var/log/messages, I get multiple instances
like this one.... about every 30 seconds...
>>>/var/log/messages>>>
nfsd[491]: Unable to setgroups: Operation not permitted
last message repeated 127 times
last message repeated 271 times
<<</var/log/messages

There is not much documentation on exports apart from
the stuf in man, which I read, and thought to have
been applying...

Help greatly appreciated.

B.T.W. changing the UID's on HP-UX or linux is not
possible because of usage in different networks, which
would cause *too big* a change...

oh and B.T.W.2. I did not forget /usr/sbin/exportfs...

Merry Greetings from - Z'ge Groetjes vanwege
*** Dieter Demerre ----- ddemerre@acm.org **
    http://www.angelfire.com/de/ddemerre/
********************************************
Wanna get rid of idle Processor cycles ?
distributed.net ? Try synchronising outlook.
********************************************
- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGPfreeware 6.5.1 Int. for non-commercial use
<http://www.pgpinternational.com>

mQENAzhXiLAAqQEIAMsoaNcCZFHswGBK1J4dRJvjUA7XwIICCKIKwU1HZIz5meGk
rbSgfK3SwJaqQOTRveKjPYtiZ7D6H19bjsO+P9bvdvEZHLC4dCQIvJfSMlcvSvLN
2S/wpfqaDZBsFDk2WnBmah9wilrm3QE4ATbWgGDeRd/XvPuRNc10FiZjRnEp5h+1
PcBppgljLhlJuBFEKxEXxjUsyBTl1zM3Gex8u+vNvg80DtlnlUB7Kc++JkJOSa3e
7FZAN7WEXztH9rKQmeCc/a1S00zHoPBeJnsfhjaX/nUhL2MH0AfTn0fX2W7LxgEQ
J9MJhxr8Ejlsj+a5wQD2OFGk4Ttn4ftB++EuukMABRG0IURpZXRlciBEZW1lcnJl
IDxkZGVtZXJyZUBhY20ub3JnPokBFQMFEDhXiLDh+0H74S66QwEBr2MIAJyuK5vb
4gMBZNelDedU53df23VfyrychlEH5E2fudaqpt3pspCQgX78KK4vLWsFr9ycUUYF
0FdTQBCUuhvj8BShexU9VocxjuoSaNuNwMqNZCWIAWx3OksvkTiNmXUC8rswxYKu
Z81O8LQifpjSe4tifAoZvdSBjrvKNyx6UfAWLrYlaUOmzxzRtulIIW8L429aU//a
ivhdBmBs4TKR9/NTCwI1Z/OY8Kc46keOI4cmdTNDGDYjlZHNi7UG8kj4XxajL40o
6yLY7m2TfXBbRB2aK10CjinpPhi+Vk6fA3KJ9/a4am4o2Oe8Tvqm8DPp0BM4VuyW
dT7wQMNZk5WW0Ho=
=kTdL
- -----END PGP PUBLIC KEY BLOCK-----

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.1 Int. for non-commercial use
<http://www.pgpinternational.com>

iQEVAwUBOJGxweH7QfvhLrpDAQGtDggAwhgYxJL5FVTpq9Ee7Ar20LmPRe3YO13k
9BfuH3nHlmrLO1SGVBU7+q/RkQA6ES3jU0x4dMLcgEVW9IGV3Y8UT2UDpMNRuyt3
dW0ZdlUXH5+bXdBzUAdoe6OKWn4Ud1OR8XFOA0+eyYub69C8BEF06ZNDNMWfw46u
xGmYI9WYSEr4ztf38eoe/Bqum6SqQND3Y+PR6q2lNS/xEz+c1t3LYpSbiSzHQZkE
5DjNFZ6Udkiwu1bCgR9wqZK5HdG1CPbspljZ6x+UzQOvUCYXFbYjNik6X6A9jRsI
ccj+7RNmKyBrLrCiOHYI4afWNgLEChHn/SoWnYbSl9RBp71rPtXZHQ==
=AF90
-----END PGP SIGNATURE-----
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.rutgers.edu



This archive was generated by hypermail 2b29 : Mon Jan 31 2000 - 21:00:33 EST