From: steve <steve@steve-ss.com>
To: "J. Bruce Fields" <bfields@fieldses.org>
Cc: Peter Horvath <peter.horvath77@googlemail.com>,
linux-nfs@vger.kernel.org
Subject: Re: NFSv4 client restriction
Date: Thu, 23 Feb 2012 08:09:47 +0100 [thread overview]
Message-ID: <4F45E63B.9090608@steve-ss.com> (raw)
In-Reply-To: <20120223010111.GA19432@fieldses.org>
On 02/23/2012 02:01 AM, J. Bruce Fields wrote:
> On Wed, Feb 22, 2012 at 07:24:12PM +0000, Peter Horvath wrote:
>> We are using Ubuntu LTS 10.04 servers and clients.
>> NFS version is the following:
>> nfs-common 1.2.0-4ubuntu4.2
>> nfs-kernel-server 1.2.0-4ubuntu4.2
>>
>> My exports looks like this:
>>
>> /srv 10.66.3.0/24(fsid=0,ro,no_subtree_check,sync)
>> /srv/www/project1 10.66.3.101(rw,no_root_squash,no_subtree_check,sync)
>> /srv/www/project2 10.66.3.102(rw,no_root_squash,no_subtree_check,sync)
>> /srv/www/project3 10.66.3.103(rw,no_root_squash,no_subtree_check,sync)
>>
>> My problem is that in this case clients have only read-only access. If
>> i set the pseudofilesystem root to RW it is working but in that case
>> all the clients would be able to mount the root and access other
>> projects too.
>> How can i achieve the same results as it was in NFSv3 with this config.
>>
>> /srv/www/project1 10.66.3.101(rw,no_root_squash,no_subtree_check,sync)
>> /srv/www/project2 10.66.3.102(rw,no_root_squash,no_subtree_check,sync)
>> /srv/www/project3 10.66.3.103(rw,no_root_squash,no_subtree_check,sync)
> Are project1, 2, 3 on the same filesystem as /srv and /srv/www?
>
> If so, this is expected; create a separate partition for /srv/www, or
> for each project1, 2, 3 directory, and you may find the problem is
> fixed.
>
> If that doesn't fix the problem, it may be a bug. We've fixed a few
> bugs in that area lately, so it would be worth retrying with more recent
> kernel and nfs-utils.
>
> --b.
> --
> To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
It is not recommended to use the pseudoroot fsid=0 stuff for Linux.
See the nfs wiki: 'The linux implementation allows you to designate a
real filesystem as the pseudofilesystem, identifying that export with
the fsid=0 option; we no longer recommend this. Instead, on any recent
linux distribution, just list exports in /etc/exports exactly as you
would for NFSv2 or NFSv3.'
HTH
Steve
next prev parent reply other threads:[~2012-02-23 7:10 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-02-22 19:24 NFSv4 client restriction Peter Horvath
2012-02-23 1:01 ` J. Bruce Fields
2012-02-23 1:24 ` Peter Horvath
2012-02-23 1:45 ` J. Bruce Fields
2012-02-23 7:09 ` steve [this message]
2012-02-23 10:25 ` Peter Horvath
2012-02-23 14:16 ` Daniel Kahn Gillmor
2012-02-23 15:42 ` steve
2012-02-29 22:32 ` J. Bruce Fields
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4F45E63B.9090608@steve-ss.com \
--to=steve@steve-ss.com \
--cc=bfields@fieldses.org \
--cc=linux-nfs@vger.kernel.org \
--cc=peter.horvath77@googlemail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).