Re: Permission denied errors
try restarting nfs and try mounting again from the client. hopfully this should work. vijay On Friday 27 September 2002 07:26 pm, you wrote: > no_root_squash doesn't seem to work. Should the machine be re-booted > for the change to take effect? Your help is appreciated. > > Thanks, > Ashwin. > > Frank Smith wrote: > > --On Friday, September 20, 2002 11:43:51 -0400 Ashwin Bijur > > > > <[EMAIL PROTECTED]> wrote: > >> We use amanda 2.4.2p2 on Red Hat Linux 7.3. We have nfs mounted a > >> directory on the amanda server called /xtreme23/scratch. Some of the > >> subdirectories and files under the scratch directory have permission > >> 600. The /etc/exports file on the xtreme23 > >> machine has the scratch directory exported with read and write > >> permissions (/scratch *(rw)). When we run amanda, we get an error > >> message saying "Permission Denied" for these files. Now as > >> user=amanda and group=disk, we should be able to backup these > >> files. What are we doing wrong? > > > > I'm assuming you are using tar (since I don't think you can use dump > > on an NFS mount). Amanda uses the runtar wrapper script, which is > > suid root so that tar can run as root (since tar accesses via the > > filesystem it has to run as root to access all the files). > > Most OS's map NFS access requests from UID 0 (root) to nobody > > or some other non-root user for security reasons. You probably > > need to change your export options on xtreme23 to include the > > no_root_squash option (or whatever its called on the NFS server's > > OS) for the export to the Amanda server so that root on the Amanda > > server has root access to /xtreme23/scratch, so tar can see all of > > the files. > > > > Frank > > > >> Thanks in advance, > >> Ashwin Bijur > >> Assistant Systems Administrator. > > > > -- > > Frank Smith > > [EMAIL PROTECTED] > > Systems Administrator Voice: > > 512-374-4673 > > Hoover's Online Fax: > > 512-374-4501
Re: Permission denied errors
To change NFS export options, you generally need to unmount the filesystem on the client, change the export options on the NFS server, re-export the filesystem on the server, and mount it back on the client. If you change mount options on the NFS client, you just need to remount the filesystem on the client. On the client side there may also be an option on whether to honor SUID bits (Solaris, for example). Before you spend too much time with NFS options, verify that is really the problem. If you are root on the Amanda server can you look at the files that Amanda gives errors on? If not, then you need to see why root on the Amanda host is being mapped to a different user on your NFS server. If you can read the files as root, then verify that a SUID-root executable on the NFS server really runs as root on the client. Frank --On Friday, September 27, 2002 09:56:06 -0400 Ashwin Bijur <[EMAIL PROTECTED]> wrote: > no_root_squash doesn't seem to work. Should the machine be re-booted for the change >to take effect? Your help is appreciated. > > Thanks, > Ashwin. > > Frank Smith wrote: > >> --On Friday, September 20, 2002 11:43:51 -0400 Ashwin Bijur >> <[EMAIL PROTECTED]> wrote: >> >>> We use amanda 2.4.2p2 on Red Hat Linux 7.3. We have nfs mounted a >>> directory on the amanda server called /xtreme23/scratch. Some of the >>> subdirectories and files under the scratch directory have permission >>> 600. The /etc/exports file on the xtreme23 >>> machine has the scratch directory exported with read and write >>> permissions (/scratch *(rw)). When we run amanda, we get an error >>> message saying "Permission Denied" for these files. Now as >>> user=amanda and group=disk, we should be able to backup these >>> files. What are we doing wrong? >> >> >> I'm assuming you are using tar (since I don't think you can use dump >> on an NFS mount). Amanda uses the runtar wrapper script, which is >> suid root so that tar can run as root (since tar accesses via the >> filesystem it has to run as root to access all the files). >> Most OS's map NFS access requests from UID 0 (root) to nobody >> or some other non-root user for security reasons. You probably >> need to change your export options on xtreme23 to include the >> no_root_squash option (or whatever its called on the NFS server's >> OS) for the export to the Amanda server so that root on the Amanda >> server has root access to /xtreme23/scratch, so tar can see all of >> the files. >> >> Frank >> >> >>> Thanks in advance, >>> Ashwin Bijur >>> Assistant Systems Administrator. >>> >> >> >> -- >> Frank Smith >> [EMAIL PROTECTED] >> Systems Administrator Voice: >> 512-374-4673 >> Hoover's Online Fax: >> 512-374-4501 > > -- Frank Smith[EMAIL PROTECTED] Systems Administrator Voice: 512-374-4673 Hoover's Online Fax: 512-374-4501
Re: Permission denied errors
no_root_squash doesn't seem to work. Should the machine be re-booted for the change to take effect? Your help is appreciated. Thanks, Ashwin. Frank Smith wrote: > --On Friday, September 20, 2002 11:43:51 -0400 Ashwin Bijur > <[EMAIL PROTECTED]> wrote: > >> We use amanda 2.4.2p2 on Red Hat Linux 7.3. We have nfs mounted a >> directory on the amanda server called /xtreme23/scratch. Some of the >> subdirectories and files under the scratch directory have permission >> 600. The /etc/exports file on the xtreme23 >> machine has the scratch directory exported with read and write >> permissions (/scratch *(rw)). When we run amanda, we get an error >> message saying "Permission Denied" for these files. Now as >> user=amanda and group=disk, we should be able to backup these >> files. What are we doing wrong? > > > I'm assuming you are using tar (since I don't think you can use dump > on an NFS mount). Amanda uses the runtar wrapper script, which is > suid root so that tar can run as root (since tar accesses via the > filesystem it has to run as root to access all the files). > Most OS's map NFS access requests from UID 0 (root) to nobody > or some other non-root user for security reasons. You probably > need to change your export options on xtreme23 to include the > no_root_squash option (or whatever its called on the NFS server's > OS) for the export to the Amanda server so that root on the Amanda > server has root access to /xtreme23/scratch, so tar can see all of > the files. > > Frank > > >> Thanks in advance, >> Ashwin Bijur >> Assistant Systems Administrator. >> > > > -- > Frank Smith > [EMAIL PROTECTED] > Systems Administrator Voice: > 512-374-4673 > Hoover's Online Fax: > 512-374-4501
Re: Permission denied errors
--On Friday, September 20, 2002 11:43:51 -0400 Ashwin Bijur <[EMAIL PROTECTED]> wrote: > We use amanda 2.4.2p2 on Red Hat Linux 7.3. We have nfs mounted a directory on the >amanda server called /xtreme23/scratch. Some of the subdirectories and files under >the scratch directory have permission 600. The /etc/exports file on the xtreme23 > machine has the scratch directory exported with read and write permissions (/scratch >*(rw)). When we run amanda, we get an error message saying "Permission Denied" for >these files. Now as user=amanda and group=disk, we should be able to backup these > files. What are we doing wrong? I'm assuming you are using tar (since I don't think you can use dump on an NFS mount). Amanda uses the runtar wrapper script, which is suid root so that tar can run as root (since tar accesses via the filesystem it has to run as root to access all the files). Most OS's map NFS access requests from UID 0 (root) to nobody or some other non-root user for security reasons. You probably need to change your export options on xtreme23 to include the no_root_squash option (or whatever its called on the NFS server's OS) for the export to the Amanda server so that root on the Amanda server has root access to /xtreme23/scratch, so tar can see all of the files. Frank > Thanks in advance, > Ashwin Bijur > Assistant Systems Administrator. > -- Frank Smith[EMAIL PROTECTED] Systems Administrator Voice: 512-374-4673 Hoover's Online Fax: 512-374-4501
Permission denied errors
Hi, We use amanda 2.4.2p2 on Red Hat Linux 7.3. We have nfs mounted a directory on the amanda server called /xtreme23/scratch. Some of the subdirectories and files under the scratch directory have permission 600. The /etc/exports file on the xtreme23 machine has the scratch directory exported with read and write permissions (/scratch *(rw)). When we run amanda, we get an error message saying "Permission Denied" for these files. Now as user=amanda and group=disk, we should be able to backup these files. What are we doing wrong? Thanks in advance, Ashwin Bijur Assistant Systems Administrator. > Combustion Research and Flow Technology, Inc. > 174 North Main Street > Building 3, P.O.Box 1150 > Dublin, PA 18917 > Tel: (215) 249-9780
