Hi there folks!
Im trying to migrate from NFSv3 to NFSv4. I've read diverse Articles and
Howtos, but i cant find a solution to my problem.
For better understanding: My NFSv4 Root is /srv/data/, a Folder that
existed before and has diverse Subfolders in it. These Folders are
really there and are not mounted by "mount --bind".
The Servers IP: 192.168.0.10
Client1: 192.168.0.1
Client2: 192.168.0.2
Setup with NFSv3:
2 Folders (scratch and software) were shared for 2 Clients. In Scratch
both clients had full RW-access and on software only Client2 had rw,
Client1 had RO.
Config:
/srv/data/scratch-all *(rw,async,no_root_squash,nohide,no_subtree_check)
/srv/data/software
10.0.12.4(ro,sync,no_root_squash,nohide,no_subtree_check)
10.0.12.5(rw,sync,no_root_squash,nohide,no_subtree_check)
My NFSv4 Config (from Server/etc/exports)
|/srv/data/
192.168.0.2(rw,sync,fsid=0,insecure,no_root_squash,no_subtree_check)
192.168.0.1(rw,sync,fsid=0,insecure,no_root_squash,no_subtree_check)
/srv/data/scratch *(rw,async,no_root_squash,no_subtree_check)
/srv/data/software 192.168.0.1(ro,sync,no_root_squash,no_subtree_check)
192.168.0.2(rw,sync,no_root_squash,no_subtree_check)
|
After that i mounted from Client1 and Client2 the Sharefolders
directrly (e.g. software: mount -t nfs4 -o intr,hard,rw
192.168.0.10:/software /targetfolder), everything works perfect, every
Client has its specific rights and so on.
But if im mounting Servers Root (mount -t nfs4 -o intr,hard,rw
192.168.0.10:/ /targetfolder) from Client1 I do have complete RW Access
to the full "Data" folder, even with RW for Software (which i set for
RO). I also do see folders I didnot specificly share (e.g. there is a
folder 'lost+found' in /srv/data which should not be shared).
My Question is:
What do i have to do, that even if im mounting Servers root, I only can
see and access the specificly for this client configurated exports?
(Also with correct access, of course)
Is it possible that way or do i have to make a complete new folder, set
it as new root, mount --bind the needed folders in there and then share
them?
I tried setting Roots Parameters for Client1 to RO, but after that i
even didnt have RW to /scratch per direct mount.
What am I doing wrong? Im looking forward to any feedback.
Greetings,
Christopher
--
To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
