NFS Connection Refused.

**RobinVossen** · 12-03-2007

Hello, I did setup a NFS share on this Gentoo box with the following /etc/exports file:

Code:

/home/john/ 192.168.1.1(async,rw)

When I start the nfs function I get:

Code:

/etc/init.d/nfs start
Exporting NFS subtree_check not set setting to default No_subtree_check [Ok]
Starting NFS mountd [Ok]
Starting NFS Daemon [!!]
Starting NFS smnotify [Ok]

When I go to the box that is going to connect I get:
ifconfig

Code:

venet0-00 (Yea its a OpenVZ box)
inet addr:192.168.1.1

And on

Code:

mount 192.168.1.11:/home/john/ /home/_sxb/

I get

Code:

mount : 192.168.1.11:/home/john/ failed, reason given by server: Permission denied

I did think about the /etc/hosts.allow file but I cant find that in the Documentation I used to set this up.

I know this aint really secure. And that I should user Kerb. but I just need to sketch a Demo for my Boss..

Cheers,
Robin

**matonb** · 12-03-2007

Starting NFS Daemon [!!]

Are you sure that nfs is up and running properly ?

Can you see the exported file systems when you run

Code:

# exportfs

on the nfs host machine ?

**RobinVossen** · 12-03-2007

Well I saw that aswell thats why I did post it.
I assumed it was running since I got auth mistake instead of Unable to Connect.
and when I do exportfs I get /home/john 192.168.1.1
So yea I guess its running.
There is no Firewall or what so ever between the boxes.

Cheers,
Robin

**matonb** · 12-03-2007

nfs send user ID's not names, could be that account john on box A and john on box B user ID's don't match which would then make it a file/dir permissions issue

**RobinVossen** · 12-03-2007

Well there isnt a user called John on that box.
The user is called _sxb there.

Is there a way to remove the UID checking and just let it go on the IP addrs that is allowed. (Since I thought it worked like that)
I will implent Kerb. later anyhow.

**matonb** · 12-03-2007

Well there isnt a user called John on that box.
The user is called _sxb there.

Is there a way to remove the UID checking and just let it go on the IP addrs that is allowed. (Since I thought it worked like that)
I will implent Kerb. later anyhow.

No I don't think so. Why not just create a share point "/exports/demo" for example, set loose permissions and export that?

Exporting your /home/<user> directory in this situation isn't your best option.

**RobinVossen** · 12-03-2007

Well it is. Since that box that is goes to is in a SecureNetwork and is the Application Server.
Since I want everyuser to have its Own Application Settings and the application runs on the server and just Tunnels the Graphical user Interface the HomeFolder of the user has to be mounted there.
Since its a ApplicationServer Nobody else then John may know he uses the box.
So if you check on the Application server in the /home/ folder nobody may see the Name John. only his Code name '_sxb'
So I have to mount the folder /home/john to the Application Server under his Code name /home/_sxb.
John also starts Apps using the line

Code:

ssh -2 -c blowfish -X _sxb@appserver firefox

So, Well I have to mount over the homefolder with that Reason

Ill try to give them the same UID if that will work?
(I only have to change the shadow and the passwd file then right?)

ps.
The entire HOME folder is done since that the user also has to Save his Files he made with Abiword to the /home/_sxb

Cheers,
Robin

**matonb** · 12-03-2007

but I just need to sketch a Demo for my Boss..

Was what I meant by not your best option. You could create a john account on the remote machine and match the uid's for your demo.

You probably want to look at nfs automounter if your looking to mount user home directories on a remote server.

**matonb** · 12-03-2007

And yes if you give _sxb the same id's as John that will work (as long as another user isn't using them already!).

**RobinVossen** · 12-03-2007

Well the user Johns PC is on the box that the user (John ofc) uses to connect to the AppServer..
I cant use a AutoMounter since they use the /etc/inittab and this Appserver will never CloseDown.

So, you say i should just change the /etc/shadow and /etc/passwd PID of the user accounts so they are the same?

Cheers,
Robin

[Edit]
I saw you posted Quickly before I saw your new post.
Ill do that now

[Edit2]
you wont belive this.
They already were both UID 1001

Cheers,
Robin

Thread Tools

Display

NFS Connection Refused.

Posting Permissions