nfs problem

[Craig Tinson]

guys.. hope someone can point me in the right direction here..

I have a rh9 server co-located at my isp.. I want to export the web
root.. I have:

-----------------------
/var/www/       <my ip>/255.255.255.0(no_root_squash,rw)
-----------------------

in /etc/exports

when I try to mount that export here I get:

[root@gw mnt]# mount <server ip>:/var/www/ /mnt/www
mount: wmm.legend.co.uk:/var/www/ failed, reason given by server:
Permission denied

in the server logs I have:

Dec 15 02:32:52 wmm rpc.mountd: refused mount request from <my ip> for
/var/www (/): no export entry

so am a bit confused...

I have compared the setup to my home network where my server (host: gw)
is exporting various directories to my dev machine.. and that all works
fine..

any idea?

Cheers

Craig

[Scott Burch]

>  I have a rh9 server co-located at my isp.. I want to export the web
>  root.. I have:
>  
>  -----------------------
>  /var/www/       <my ip>/255.255.255.0(no_root_squash,rw)
>  ----------------------- 
Are you behind a firewall doing NAT?  If so, you may need to change the ip
address to match the outside of the NAT (are you putting in the private
address rather than the public one?).  

Of course, no_root_squash is a really bad idea.

Scott

[Brian Fahrlander]

On Sun, 2003-12-14 at 20:54, Craig Tinson wrote:
>  guys.. hope someone can point me in the right direction here..
>  
>  I have a rh9 server co-located at my isp.. I want to export the web
>  root.. I have:
>  
>  -----------------------
>  /var/www/       <my ip>/255.255.255.0(no_root_squash,rw) 
    One more note...to enable it for writing, you'll need to enter each,
writeable IP address.  It's not obvious in the manual, but NFS doesn't
allow wildcard matches to write...ever. (Unless they've changed it
recently).

    Export it like /var/www ip-address options

    ...and restart nfs; that should do it.

-- 
------------------------------------------------------------------------
Brian Fahrländer                 Researcher, Conservative, and Technomad
Evansville, IN                                     http://Fahrlander.net
ICQ  5119262              Microsoft never invented email; that was Unix.
------------------------------------------------------------------------

[Craig Tinson]

Scott Burch wrote:

> >I have a rh9 server co-located at my isp.. I want to export the
> web
> >root.. I have:
> >
> >-----------------------
> >/var/www/       <my ip>/255.255.255.0(no_root_squash,rw)
> >-----------------------
> >    
> >
>
> Are you behind a firewall doing NAT?  If so, you may need to change the ip
> address to match the outside of the NAT (are you putting in the private
> address rather than the public one?).  
>
>   
>  
am behind a firewall.. what ports does nfs use? didn't think about the 
firewall for some reason.. might be the fact it's gone 5am... lol

> Of course, no_root_squash is a really bad idea.
>   
>  
will tighten up security once I get the thing to work *at all*.. lol

cheers

Craig

[Scott Burch]

>  am behind a firewall.. what ports does nfs use?  
That's a deeper subject because it portmaps by default.  The way I do it
is to form a ssh vpn first and then work through that.  Also adds some
security. 

Check out the how-to at http://www.wdm.com/LDP/HOWTO/ppp-ssh/index.html 

Scott

[David Utidjian]

Brian Fahrlander wrote:
>  On Sun, 2003-12-14 at 20:54, Craig Tinson wrote:
>  
> >guys.. hope someone can point me in the right direction here..
> >
> >I have a rh9 server co-located at my isp.. I want to export the web
> >root.. I have:
> >
> >-----------------------
> >/var/www/       <my ip>/255.255.255.0(no_root_squash,rw)
>  
>  
>      One more note...to enable it for writing, you'll need to enter each,
>  writeable IP address.  It's not obvious in the manual, but NFS doesn't
>  allow wildcard matches to write...ever. (Unless they've changed it
>  recently).
>  
>      Export it like /var/www ip-address options
>  
>      ...and restart nfs; that should do it. 
Brian,

I think you are mistaken...

/var/www  192.168.1.0/255.255.255.0(no_root_squash,rw)
will export to the entire 192.168.1.x IP range.

/var/www  192.168.1.1(no_root_squash,rw)
will export to a single IP address.

/var/www  192.168.1.1 (no_root_squash,rw)
will export to the entire internet (note the space).

/var/www	(no_root_squash,rw)
will export to the entire internet.

/var/www	*(no_root_squash,rw)
will export to the entire internet.

It has been this way for at least the past six years. See man exports 
for more details (and other docs).

-DU-...etc...

[Alexandre Strube]

Em Seg, 2003-12-15 às 00:54, Craig Tinson escreveu:
>  I have a rh9 server co-located at my isp.. I want to export the web
>  root.. I have:
>  /var/www/       <my ip>/255.255.255.0(no_root_squash,rw) 
(...)
>  [root@gw mnt]# mount <server ip>:/var/www/ /mnt/www
>  mount: wmm.legend.co.uk:/var/www/ failed, reason given by server:
>  Permission denied
>  Dec 15 02:32:52 wmm rpc.mountd: refused mount request from <my ip> for
>  /var/www (/): no export entry 
I had this when the client was connected using NAT. when the client has
a real ip, everything went fine.

-- 
[]s

Alexandre Ganso 
500 FOUR vermelha - Diretor Steel Goose Moto Group

[Alexandre Strube]

Em Seg, 2003-12-15 às 01:29, Scott Burch escreveu:

>  Are you behind a firewall doing NAT?  If so, you may need to change
> the ip
>  address to match the outside of the NAT (are you putting in the private
>  address rather than the public one?).   
I did this, and didn't worked for me either.

-- 
[]s

Alexandre Ganso 
500 FOUR vermelha - Diretor Steel Goose Moto Group

[David S. Johnson]

Alexandre Strube wrote:

> Em Seg, 2003-12-15 às 01:29, Scott Burch escreveu:
>
>   
>
> >Are you behind a firewall doing NAT?  If so, you may need to change the ip
> >address to match the outside of the NAT (are you putting in the private
> >address rather than the public one?).  
> >    
> >
>
> I did this, and didn't worked for me either.
>
>   
>  
I'm not sure of the cause, but I've seen this on a recurring basis with 
FC1.  Restarting nfsd is not sufficient to resolve.  What does seem to 
work is doing the following from your nfs server: "service stop nfsd", 
edit /var/lib/nfs/rmtab and remove any line for the host getting this 
error, then "service start nfsd" to get things going again.

-- 
--------------------------------------------------------
   "Oh scholar, if your scholarship benefits not Mankind,
    you deserve not admiration but contempt." -- Kahlil Gibran