Dell PowerVault NX3500 Administrator's Guide - Page 176

NFS Access Denied to a File or Directory, Problematic SMB Access From a Linux Client

Page 176 highlights

NFS Access Denied to a File or Directory Description Cause Workaround User cannot access the NFS file or directory despite the fact that the user belongs to the group owning the NFS object and the group members are permitted to perform the operation. NFS servers (versions 2 and 3) use the Remote Procedure Call (RPC) protocol for authentication of NFS clients. Most RPC clients have a limitation, by design, of up to 16 groups passed to the NFS server. If a user belongs to more than 16 UNIX groups, as supported by some UNIX flavors, some of the groups are not passed and are not checked by the NFS server and thus the user's access may be denied. A possible way to verify this problem is to use newgrp to temporarily change the primary group of the user and thus ensure it is passed to the server. The simple workaround, although not always feasible, is to remove the user from unnecessary groups, leaving only 16 groups or less. Problematic SMB Access From a Linux Client Description Workaround A Linux/UNIX client is trying to mount a PowerVault NX3500 share using SMB (using /etc/fstab or directly using smbmount). A Linux/UNIX client is trying to access the file system using the smbclient command, such as: smbclient /// -U user%password -c ls It is recommended that you use the NFS protocol interfaces to access the PowerVault NX3500 DSFS systems from Linux/UNIX clients. To workaround this issue: 1 Ensure that your admin creates NFS exports to same locations that you use to access using CIFS and connect to them using mount command from Linux/UNIX clients. 2 Use NFS based interfaces to access the PowerVault NX3500. For example, from the NAGIOS Linux management system, use the /check_disk command instead of the /check_disk_smb command. 176 Troubleshooting

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198

176
Troubleshooting
NFS Access Denied to a File or Directory
Problematic SMB Access From a Linux Client
Description
User cannot access the NFS file or directory despite the fact that
the user belongs to the group owning the NFS object and the
group members are permitted to perform the operation.
Cause
NFS servers (versions 2 and 3) use the Remote Procedure Call
(RPC) protocol for authentication of NFS clients. Most RPC
clients have a limitation, by design, of up to 16 groups passed to
the NFS server. If a user belongs to more than 16 UNIX groups, as
supported by some UNIX flavors, some of the groups are not
passed and are not checked by the NFS server and thus the user's
access may be denied.
Workaround
A possible way to verify this problem is to use newgrp to
temporarily change the primary group of the user and thus ensure
it is passed to the server.
The simple workaround, although not always feasible, is to remove
the user from unnecessary groups, leaving only 16 groups or less.
Description
A Linux/UNIX client is trying to mount a PowerVault NX3500
share using SMB (using /etc/fstab or directly using smbmount).
A Linux/UNIX client is trying to access the file system using the
smbclient command, such as:
smbclient //<nas>/<share> -U
user%password -c ls
Workaround
It is recommended that you use the NFS protocol interfaces to
access the PowerVault NX3500 DSFS systems from Linux/UNIX
clients. To workaround this issue:
1
Ensure that your admin creates NFS exports to same locations
that you use to access using CIFS and connect to them using
mount command from Linux/UNIX clients.
2
Use NFS based interfaces to access the PowerVault NX3500. For
example, from the NAGIOS Linux management system, use the
/check_disk command instead of the /check_disk_smb command.