Solaris 11 nfs problem

[Przem]

Hello

Yet another problem with my lack of S11 experience...

I'm sharing whole "/" with:

zfs sharenfs=on rpool/ROOT/solaris

command, its because I put "/opt/jumpstart" directly there, not on
dedicated zfs pool.

Bow on client side which is SOlaris 10 I have this problem:

s10:/root# id
uid=0(root) gid=0(root)
s10:/root# ls -la /mnt/Files/platform_shared/var/spool/cron/
total 9
drwxr-xr-x 3 root sys 3 Oct 24 2000 .
drwxr-xr-x 4 root bin 4 May 14 2002 ..
drwxr-xr-- 2 root sys 6 Oct 3 2008 crontabs
s10:/root# ls -la /mnt/Files/platform_shared/var/spool/cron/crontabs/
/mnt/Files/platform_shared/var/spool/cron/crontabs/.: Permission
deniedcrontabs/
/mnt/Files/platform_shared/var/spool/cron/crontabs/..: Permission denied
/mnt/Files/platform_shared/var/spool/cron/crontabs/root.global:
Permission denied
/mnt/Files/platform_shared/var/spool/cron/crontabs/sys: Permission denied
/mnt/Files/platform_shared/var/spool/cron/crontabs/adm: Permission denied
/mnt/Files/platform_shared/var/spool/cron/crontabs/root: Permission denied

Why with root user I cant access root owned folder??
I know there have to be some "zfs" option for nfs, but which one?..

--
Przem

[Casper H.S. Dik]

Przem <pk...@o2.pl> writes:

>Why with root user I cant access root owned folder??
>I know there have to be some "zfs" option for nfs, but which one?..

A jumpstart directory must be shared with "ro" and "anon=0".

Users with uids 0 are handled differently: remote root is
not trusted by the server unless you specifically instruct it
to trust it (anon=0 tells that "anonymous" users, i.e., root,
is treated as if they are root) Similarly, there is the
root=hosts option.

But it is important that you shrae it readonly or install clients
will likely damage the shared root directory.
(The install procedure expects that the root directory is
not writable and interesting things will happen, such as
missing network interfaces and such)

You can also "chmod" the root directory:
- chmod -R a+rX /opt/jumpstart

(note uppercase X)

For some reason, some important executables needed for
installing aren't executable if the jumpstart directory
is not shared with root access.

Casper

[Przem]

W dniu 09.02.2013 16:52, Casper H.S. Dik pisze:

Hi

Yes, found it, my options were:

s11# zfs get share
NAME PROPERTY VALUE SOURCE
rpool/ROOT/solaris share
name=rpool_ROOT_solaris,path=/,prot=nfs local

Now after adding "anon=0,sec=sys," all permissions are OK.

thanks!

--
Przem

[Casper H.S. Dik]

Make sure you add "ro" or the clients might destroy the
image.


Casper