2009-11-28 21:47:03

by Brian J. Murrell

[permalink] [raw]
Subject: NFSv4 and EPERM for all but one user

I have an NFSv4 export configured on a server with kernel
2.6.24-24-generic:

/usr/local pc(sec=krb5,rw,no_root_squash,sync,subtree_check) \
pvr(sync,subtree_check)

On the machine "pc" one user (me) is able to read it:

$ sudo su - brian -c "ls -l /usr/local"
total 36
drwxr-xr-x 2 root root 4096 2009-06-19 10:05 bin
drwxr-xr-x 4 root root 4096 2009-01-01 09:56 Brother
drwxr-xr-x 2 root root 4096 2008-11-29 10:49 etc
drwxr-xr-x 2 root root 4096 2007-03-24 21:01 games
drwxr-xr-x 2 root root 4096 2007-03-24 21:01 include
drwxr-xr-x 7 root root 4096 2009-08-02 11:54 lib
lrwxrwxrwx 1 root root 9 2007-03-24 21:01 man -> share/man
drwxr-xr-x 2 root root 4096 2007-03-24 21:01 sbin
drwxr-xr-x 12 root root 4096 2009-07-07 08:40 share
drwxr-xr-x 2 root root 4096 2007-03-24 21:01 src

But any other user is not:

$ sudo su - brianm -c "ls -l /usr/local"
No directory, logging in with HOME=/
bind: Address already in use
ls: cannot open directory /usr/local: Permission denied

$ sudo su - nobody -c "ls -l /usr/local"
No directory, logging in with HOME=/
bind: Address already in use
ls: cannot open directory /usr/local: Permission denied

This filesystem is mounted with autofs on "pc" which is running
2.6.30-10-generic:

/usr/local -fstype=nfs4,sec=krb5 linux:/usr/local

I'm positive this is PEBKAC but I'm not sure of what nature.

Any ideas?

b.


Attachments:
signature.asc (197.00 B)
This is a digitally signed message part