/var/mail and secure NFS

From: Emil Petkov (emil.petkov_at_usa.net)
Date: 10/24/03


Date: Fri, 24 Oct 2003 20:04:34 +0200

Trying to export /var/mail on my mail server and mount it on a client
box (both Solaris 8 in a NIS+ domain) with sec=dh option gave me decent
access for root on the client box but no access for normal users. All
kinds of attempts to access the directory return an error code of 22
EINVAL. It is not visible if I try to list /var as well.

Permissions for both the mount point and the exported dir are 1777
root:mail. The export has an rw option for the client machine and all
the other necessary stuff.

So the export looked like this:
share -F nfs -o sec=dh,rw=suns /var/mail

And the mount in /etc/vfstab on the client:
<server>:/var/mail - /var/mail nfs - no
sec=dh,rw,noac,hard,actimeo=0

After trying everything I removed the sec=dh option from both the export
and the mount and the above problem did not occur. What am I missing here?

Any help will be appreciated.

Regards,
Emil Petkov



Relevant Pages

  • Re: exported nfs drive not mounting after reboot
    ... I am using NIS so maybe I'll check the /etc/hosts files on the clients as they normally just specify there own ip stuff. ... Sometimes the mount request expires before the system knows who "serverA" is. ... I am assuming you are not rebooting both the server and the client at the same time. ...
    (AIX-L)
  • Solaris <--> Gentoo Linux NFS problem
    ... I'm having trouble mounting an NFS fileshare from a Solaris 9 server ... to a Gentoo Linux client. ... When issuing a mount command, ... Rpcinfo queries of the server report all is well. ...
    (SunManagers)
  • Re: recent nfs change causes autofs regression
    ... If the user asks for a new mount that is read-write, ... get it - ie we should not re-use the old client handles, ... everything needs to have the same flags), THOSE PEOPLE, who want the NEW ... or deleted on the server are now extended to also include the ...
    (Linux-Kernel)
  • Re: nfsmnthelp holding up server nfsd?
    ... client to mount a filesystem increments BADCALLS a bunch. ... the server to watch nfs request, only 1 or two nfs requests come ...
    (comp.unix.aix)
  • Re: NFS UDP mounts on RELENG_6?
    ... >> afterwards the access to the filesystem on the client stalls. ... >> as I mount the FS with a TCP mount everything works as expected. ... >> The mounts worked fine on UDP when the server was 5.4-STABLE. ... > I just copied some files from a NFS Server running ...
    (freebsd-stable)