[SOLVED] Mounting NFS failed because of permission problem.

Message

bassvandijk · Post by **bassvandijk** » Mon Sep 05, 2005 9:00 am

When I try to mount my NFS server I get the following error:

mount /home/data
mount: tooslow:/home/data failed, reason given by server: Permission denied

Following is relevant info on my systems:

SERVER (tooslow):

Code: Select all

The server tooslow functions as my:
- firewall between the LAN and Internet (shorewall), 
- DNS and caching DNS server (djbdns), 
- webserver (apache2),
- SSH (openssh),
- timeserver (openntp)
- and ofcourse a fileserver (NFS).

hostname
tooslow

uname -a
Linux tooslow 2.6.12.5 #3 Tue Sep 6 00:02:02 CEST 2005 i586 Pentium MMX 
GenuineIntel GNU/Linux

cat /usr/src/linux/.config | grep NFS
CONFIG_NFS_FS=y
# CONFIG_NFS_V3 is not set
# CONFIG_NFS_V4 is not set
# CONFIG_NFS_DIRECTIO is not set
CONFIG_NFSD=y
CONFIG_NFSD_V3=y
# CONFIG_NFSD_V4 is not set
CONFIG_NFSD_TCP=y

ifconfig eth0
eth0      Link encap:Ethernet  HWaddr 00:50:BF:32:A0:90
          inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:32091 errors:0 dropped:0 overruns:0 frame:0
          TX packets:36592 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:3151651 (3.0 Mb)  TX bytes:29832904 (28.4 Mb)
          Interrupt:10 Base address:0xe000

cat /etc/resolv.conf
nameserver 192.168.0.1
domain vandijk

cat /etc/exports
/home/data 192.168.0.0/255.255.255.0(rw,async,no_root_squash)

ls -ld /home/data
drwxr-xr-x  8 root root 168 Sep  4 17:14 /home/data

/etc/init.d/nfs status
 * status:  started

ps -A -o pid,command -H
...
5534   /sbin/portmap
5653   [nfsd]
5654   [nfsd]
5655   [nfsd]
5656   [nfsd]
5658   [lockd]
5665   /usr/sbin/rpc.mountd
...

cat /etc/conf.d/nfs
RPCNFSDCOUNT=4
RPCMOUNTDOPTS=""
RPCSTATDOPTS=""
RPCIDMAPDOPTS=""
EXPORTFSTIMEOUT=30

cat /etc/shorewall/policy                                                                                   
loc             net             ACCEPT
loc             fw              ACCEPT
loc             loc             ACCEPT

fw              net             ACCEPT
fw              loc             ACCEPT

net             all             DROP            info
all             all             REJECT          info

cat /etc/shorewall/rules
AllowSSH        net             fw
AllowPing       net             fw
AllowWeb        net             fw
AllowFTP        net             fw

ping bassbox
PING bassbox.vandijk (192.168.0.3) 56(84) bytes of data.
64 bytes from 192.168.0.3: icmp_seq=1 ttl=64 time=16.1 ms
64 bytes from 192.168.0.3: icmp_seq=2 ttl=64 time=9.56 ms
64 bytes from 192.168.0.3: icmp_seq=3 ttl=64 time=5.47 ms

--- bassbox.vandijk ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 5.479/10.396/16.148/4.396 ms

id -u
0

CLIENT (bassbox):

Code: Select all

hostname
bassbox

uname -a
Linux bassbox 2.6.12-gentoo-r9 #3 Sun Sep 4 21:57:24 CEST 2005 i686 Intel(R) 
Pentium(R) 4 CPU 2.60GHz GenuineIntel GNU/Linux

cat /usr/src/linux/.config | grep NFS
CONFIG_NFS_FS=y
CONFIG_NFS_V3=y
# CONFIG_NFS_V4 is not set
# CONFIG_NFS_DIRECTIO is not set
# CONFIG_NFSD is not set

cat /etc/fstab
...
tooslow:/home/data      /home/data      nfs             rw,noauto,hard,intr
...

ls -ld /home/data/
drwxr-xr-x  2 root root 48 Sep  4 19:48 /home/data/

/etc/init.d/nfsmount status
 * status:  started

ps -AH -o pid,command -H
...
 7371   /sbin/portmap
...
 7465   /sbin/rpc.statd
...

ifconfig
eth1      Link encap:Ethernet  HWaddr 00:09:5B:C3:E2:89
          inet addr:192.168.0.3  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST NOTRAILERS RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:873 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1014 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:127180 (124.1 Kb)  TX bytes:91615 (89.4 Kb)
          Interrupt:10

cat /etc/resolv.conf
domain vandijk
nameserver 192.168.0.1

ping tooslow
PING tooslow.vandijk (192.168.0.1) 56(84) bytes of data.
64 bytes from 192.168.0.1: icmp_seq=1 ttl=64 time=8.49 ms
64 bytes from 192.168.0.1: icmp_seq=2 ttl=64 time=3.25 ms
64 bytes from 192.168.0.1: icmp_seq=3 ttl=64 time=4.82 ms

--- tooslow.vandijk ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 3.255/5.524/8.495/2.196 ms

id -u
0

mount /home/data
mount: tooslow:/home/data failed, reason given by server: Permission denied

What could be wrong?

bassvandijk · Post by **bassvandijk** » Tue Sep 06, 2005 3:33 pm

I solved it.

I needed to add my clients to /etc/hosts.allow.

cat /etc/hosts.allow

Code: Select all

portmap: 192.168.0.0/255.255.255.0
lockd: 192.168.0.0/255.255.255.0
rquotad: 192.168.0.0/255.255.255.0
mountd: 192.168.0.0/255.255.255.0
statd: 192.168.0.0/255.255.255.0

cat /etc/hosts.deny

Code: Select all

portmap:ALL
lockd:ALL
mountd:ALL
rquotad:ALL
statd:ALL