Free Downloads, Community Forum,
FAQs and Developer Resources


Make /Tools Your Home | Link to us

Today's posts | Posts since last visit | Most Active Topics

All Forums Register Login Search Subscriptions My Profile Inbox
Tool Warehouse FAQs Resources Help Member List Address Book Logout

Can't get NIS / NFS / name mapping to work

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Windows - UNIX Interop] >> System & Network Admin Forum >> Can't get NIS / NFS / name mapping to work Page: [1]
Login
Message << Older Topic   Newer Topic >>
Can't get NIS / NFS / name mapping to work - Mar. 24, '06, 7:12:42 PM   
woehlkmp

 

Posts: 102
Status: offline
I'm having a problem with NFS on SUA (Windows 2003 x64). I can mount a bunch of NFS drives and can read them as Administrator. However, I am having the following problems:

1: The uid and gid for everything on an NFS volume comes up nouser/nobody (uid = gid = -1).
2: If I change to another user, I can't read anything non-local (probably because of (1)).

Also, if I 'su' to someone and run 'id', am I supposed to get the local uid/gid or the NIS/name mapping uid/gid? How can I tell if I have name mapping set up correctly? And, of course, what's wrong with my NFS?
Post #: 1
RE: Can't get NIS / NFS / name mapping to work - Mar. 25, '06, 9:11:14 PM   
Rodney

 

Posts: 3696
Joined: Jul. 9, '02,
From: /Tools lab
Status: online
Did you install and configure the User Name Mapping (UNM) ?
The on-line help has the info in detail for this.
By setting up UNM then the Windows SID's get mapped to Unix uid's
on the remote box. Then permissions and access happen as expected.
Right now without the mapping you're just getting anonymous access.

(in reply to woehlkmp)
Post #: 2
RE: Can't get NIS / NFS / name mapping to work - Mar. 27, '06, 9:56:38 AM   
woehlkmp

 

Posts: 102
Status: offline
quote:

How can I tell if I have name mapping set up correctly?

I also should have mentioned; in Exploror, if I go to Properties->NFS Attributes, the UID and GID show up correctly.

For example, I have an NFS mounted drive 'M:'. The explorer GUI shows the UID/GID of "M:\.bash_profile" as 11828/42. If I start SUA's ksh, I get:
$ /bin/ls -ln /dev/fs/M/.bash_profile
-rw-r--r--  1 -1      -2      1312 Mar 23 17:59 .bash_profile

In Administrative Tools->Microsoft Services for NFS->User Name Mapping->{User|Group} Maps, I have 42->"foo" and 11828->"bar" (names changed, obviously, and yes I checked that "bar" is a member of "foo"). I guess this doesn't seem to be working?

(in reply to Rodney)
Post #: 3
RE: Can't get NIS / NFS / name mapping to work - Mar. 27, '06, 10:25:43 AM   
woehlkmp

 

Posts: 102
Status: offline
http://www.eggheadcafe.com/aspnet_answers/servicesforunixgeneral/Mar2006/post26047587.asp
Looks like I'm not the only one with this problem... no answers yet, unfortunately.

(in reply to woehlkmp)
Post #: 4
KB article is wrong, and it "works" now... - Mar. 27, '06, 12:02:22 PM   
woehlkmp

 

Posts: 102
Status: offline
Another update: I found "Could not connect to Mapping Server at host localhost:while connecting : RPC: Success" in Event Viewer->Application for Source=SUA. http://support.microsoft.com/kb/913001/EN-US/ says it isn't a problem... yeah, right. I changed 'SUA Subsystem Startup' to 'manual'... and guess what; it's working now.

Obviously Microsoft's KB article is wrong, at least as far as their claim that "You can safely ignore this Error event". It is in fact a real error that causes NFS UID/GID mapping to fail, and needs to be corrected.

So...

For the record, I was able to partly fix the problem by changing the startup type of the 'SUA Subsystem Startup' service to 'manual'. I say "partly" because my GID resolution is still mostly broken, but UID resolution seems to be working, and I can create and edit files on my NFS drives; i.e. it isn't perfect, but it's usable.

(in reply to woehlkmp)
Post #: 5
Did I say "usable"? - Mar. 27, '06, 4:56:19 PM   
woehlkmp

 

Posts: 102
Status: offline
Also for the record... it seems name mapping does not support mapping any GID to either of the groups "Users" or "Administrators"... possibly any of the 'factory defined' groups. If anyone else is reading this, you should expect to have to create new groups to use for GID mapping.

(in reply to woehlkmp)
Post #: 6
RE: Did I say "usable"? - Apr. 5, '06, 10:42:28 AM   
woehlkmp

 

Posts: 102
Status: offline
More "for the record"; since it took me forever to track down this information again, I'm going to re-post in the hope that someone will find it useful (yeah, right, "someone" will probably be me )...

NFS breaks with certain servers (including our OpenBSD servers) with the default configuration, which uses "unprivilaged" ports. To fix this, one must create a DWORD key with a value of '1' at the following location:
HKLM\SOFTWARE\Microsoft\Client for NFS\CurrentVersion\Default\UseReservedPorts
/var/log/messages on the server should tell you if you need to do this.

(in reply to woehlkmp)
Post #: 7
Page:   [1]
All Forums >> [Windows - UNIX Interop] >> System & Network Admin Forum >> Can't get NIS / NFS / name mapping to work Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Search All Forums -

Advanced search


SPONSORS



Forum Software © ASPPlayground.NET Advanced Edition 2.5 ANSI

0.047