NFS Permissions

mmccrae · 07-26-2012, 09:48 AM

We have two Linux boxes in our Windows environment. They predate me and anyone else still working here, so essentially they sit there largely untouched most of the time.
Recently part of the process they perform has stopped working. The cron logs indicate that one of the boxes fails to mount the other system, claiming permission denied. I noticed on booting that there's actually 2 mounts that fail.
My first question is, how do I go about troubleshooting/resolving this, and I'd be curious to know why this suddenly happened? (As of 7/18 as far as I can tell).

Machine 1 = 10.0.28.3
Machine 2 = 10.0.29.48 (trying to mount to machine 1)

Windows machines can connect to shares that machine 2 cannot mount to.

fstab on Machine 2:

Code:

10.0.28.3:/u/apps/mysql /u/mnt/qxxxxxxx/mysql nfs defaults 0 0
10.0.28.3:/u/ftp/ftpusr/Cxxxxxxx_Oxxxxx_Lxxxx
/u/mnt/qxxxxxxx/Cxxxxx_Oxxxx_Lxxxx nfs defaults 0 0
//xxx2/ftp /u/mnt/xxx2/ftp smbfs username=xxx2,password=xxx2 0 0

/etc/exports on Machine 1 (that pertain to Machine 2):

Code:

/u/apps/mysql    10.0.29.48(rw,insecure,no_root_squash,sync)
/u/ftp/ftpusr/Cxxxxxxx_Oxxxxx_Lxxxx
10.0.29.48(rw,insecure,no_root_squash,sync)
/u/downloads    10.0.29.48(rw,insecure,no_root_squash,sync)

chrism01 · 07-26-2012, 07:50 PM

1. who is the cron job running as?
2. try logging into machine 2 as root and mount manually

Code:

mount /u/mnt/qxxxxxxx/mysql

mount /u/mnt/qxxxxxxx/Cxxxxx_Oxxxx_Lxxxx

and post complete output.

also, lets see exactly what distro+version you have

Code:

cat /etc/*release*

Here's a good general Linux tutorial; someone needs to start learning this stuff (ie you

)
(http://linux.oneandoneis2.org/LNW.htm - important diffs between MS + Linux)
http://rute.2038bug.com/index.html.gz - tutorial

The answer to the 'cat ...' qn will enable us to be more specific in our advice.

Welcome to LQ

mmccrae · 07-26-2012, 08:30 PM

The cron is running as root.
From machine 2, as root, I am getting permission denied.

Code:

[root@qxxxxxx2 root]# mount -t nfs 10.0.28.3:/u/apps/mysql /u/mnt/qxxxxxxx/mysql
mount: 10.0.28.3:/u/apps/mysql failed, reason given by server: Permission denied

Machine 2 is Tao Linux and Machine 1 is an old version of CentOS.

Code:

LSB_VERSION="1.3"
Tao Linux release 1 (Mooch)
Tao Linux release 1 (Mooch)

Thanks for your help. I certainly plan on becoming familiar with Linux, but I need to get this issue resolved as soon as possible.

Thanks again!

chrism01 · 07-26-2012, 08:35 PM

So, please give us the complete version info for both: 'old version of Centos' is insufficient.

On BOTH

Code:

iptables -nvL

ps -ef|grep -i nfs

& post the results (label each system separately).

Please read those links, otherwise we are going to end up having to write very long answers.

mmccrae · 07-27-2012, 09:45 AM

Machine 1

Code:

[root@qcserver root]# cat /etc/*release*
LSB_VERSION="1.3"
CentOS release 3.9 (Final)
[root@qcserver root]#

[root@qcserver root]# iptables -nvL
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 
[root@qcserver root]# ps -ef|grep -i nfs
root      1272     1  0 Jul24 ?        00:00:00 [nfsd]
root      1273     1  0 Jul24 ?        00:00:00 [nfsd]
root      1274     1  0 Jul24 ?        00:00:00 [nfsd]
root      1275     1  0 Jul24 ?        00:00:00 [nfsd]
root      1276     1  0 Jul24 ?        00:00:00 [nfsd]
root      1277     1  0 Jul24 ?        00:00:00 [nfsd]
root      1278     1  0 Jul24 ?        00:00:00 [nfsd]
root      1279     1  0 Jul24 ?        00:00:00 [nfsd]
root     24935 24841  0 10:39 pts/2    00:00:00 grep -i nfs
[root@qcserver root]#

Machine 2

Code:

[root@qclinux2 root]# cat /etc/*release*
LSB_VERSION="1.3"
Tao Linux release 1 (Mooch)
Tao Linux release 1 (Mooch)
You have new mail in /var/spool/mail/root
[root@qclinux2 root]#

[root@qclinux2 root]# iptables -nvL
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 
[root@qclinux2 root]# ps -ef|grep -i nfs
root      3328     1  0 10:20 ?        00:00:00 [nfsd]
root      3329     1  0 10:20 ?        00:00:00 [nfsd]
root      3330     1  0 10:20 ?        00:00:00 [nfsd]
root      3331     1  0 10:20 ?        00:00:00 [nfsd]
root      3332     1  0 10:20 ?        00:00:00 [nfsd]
root      3333     1  0 10:20 ?        00:00:00 [nfsd]
root      3334     1  0 10:20 ?        00:00:00 [nfsd]
root      3335     1  0 10:20 ?        00:00:00 [nfsd]
root      4425  4372  0 10:42 pts/0    00:00:00 grep -i nfs
[root@qclinux2 root]#

chrism01 · 07-29-2012, 05:50 PM

Ok, so you appear to have 2 extremely old and out of date releases, specifically

Centos3.9
Tao 1

Both based on RHEL (Redhat enterprise Linux) v3, which went out of support yrs ago, in fact v4 went out of support this yr.

This means that updates have not been available in years, so you are using old SW severely lacking in security...

You can try here https://docs.redhat.com/docs/en-US/R...nux/index.html, specifically 'Red Hat Enterprise Linux 3' section.
Try Chap 9 of this https://docs.redhat.com/docs/en-US/R...ide/index.html

Hopefully if anyone else still has RHEL3 or equiv, they will be able to help you with the above.

These cmds may help show what parts of nfs ar eup:

Code:

service nfs status
exportfs -v
rpcinfo -p
showmount -e localhost

Unfortunately I don't have access to a v3 system.

I'd recommend moving up to Centos v6.x as soon as you can.