On Mon, Nov 16, 2009 at 07:57:57PM +0100, Christopher Metter wrote: > Hi there folks! > > Im trying to migrate from NFSv3 to NFSv4. I've read diverse Articles and > Howtos, but i cant find a solution to my problem. > > For better understanding: My NFSv4 Root is /srv/data/, a Folder that > existed before and has diverse Subfolders in it. These Folders are > really there and are not mounted by "mount --bind". > > The Servers IP: 192.168.0.10 > Client1: 192.168.0.1 > Client2: 192.168.0.2 > > Setup with NFSv3: > 2 Folders (scratch and software) were shared for 2 Clients. In Scratch > both clients had full RW-access and on software only Client2 had rw, > Client1 had RO. > Config: > /srv/data/scratch-all *(rw,async,no_root_squash,nohide,no_subtree_check) > /srv/data/software > 10.0.12.4(ro,sync,no_root_squash,nohide,no_subtree_check) > 10.0.12.5(rw,sync,no_root_squash,nohide,no_subtree_check) > > My NFSv4 Config (from Server/etc/exports) > |/srv/data/ > 192.168.0.2(rw,sync,fsid=0,insecure,no_root_squash,no_subtree_check) > 192.168.0.1(rw,sync,fsid=0,insecure,no_root_squash,no_subtree_check) > /srv/data/scratch *(rw,async,no_root_squash,no_subtree_check) > /srv/data/software 192.168.0.1(ro,sync,no_root_squash,no_subtree_check) > 192.168.0.2(rw,sync,no_root_squash,no_subtree_check) > | > After that i mounted from Client1 and Client2 the Sharefolders > directrly (e.g. software: mount -t nfs4 -o intr,hard,rw > 192.168.0.10:/software /targetfolder), everything works perfect, every > Client has its specific rights and so on. > > But if im mounting Servers Root (mount -t nfs4 -o intr,hard,rw > 192.168.0.10:/ /targetfolder) from Client1 I do have complete RW Access > to the full "Data" folder, even with RW for Software (which i set for > RO). Exports don't operate on "folders", only on filesystems: if you export /srv/data/ read-write, and if /srv/data/software is on the same filesystem as /srv/data, then /srv/data will also be exported, and also writeable. --b. > I also do see folders I didnot specificly share (e.g. there is a > folder 'lost+found' in /srv/data which should not be shared). > > My Question is: > What do i have to do, that even if im mounting Servers root, I only can > see and access the specificly for this client configurated exports? > (Also with correct access, of course) > Is it possible that way or do i have to make a complete new folder, set > it as new root, mount --bind the needed folders in there and then share > them? > > I tried setting Roots Parameters for Client1 to RO, but after that i > even didnt have RW to /scratch per direct mount. > > What am I doing wrong? Im looking forward to any feedback. > > > Greetings, > Christopher > -- > To unsubscribe from this list: send the line "unsubscribe linux-nfs" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
