Messages in this thread | | | Date | Thu, 29 Oct 1998 14:42:17 +0100 (CET) | From | Steffen Rheinhold <> | Subject | access-denied problems with knfsd-981022 |
| |
Hello,
I found out problems with current knfsd and 2.1.126 (knfsd patches applied):
1. From AIX machines, if I mount from a linux server, the group id seems to be ignored. I can only access directories, if I am the owner or the "other" people have access to it. If only the rights of the group fit, I get an "Permission denied". Example:
a) Mount (linux-2.1.126)zeus:/home on (AIX4.3)catia1:/server b) User "user1" is member of group "isdn"
user1-catia1:/> cd /server user1-catia1:/server> ls -l
drwxr-x--- 4 data isdn 1024 06 Aug 13:13 import
user1-catia1:/> cd import Permission denied
If I chmod o+rx import, it works. If I su to "data", it works too.
With an IRIX 5.3 client it looks ok.
2. With an Linux client I have a root-squash problem:
Client is linux 2.0.35, same server (zeus).
If I cd into a nfs-mounted directory which doesn't allow me to, I get a
data@charon:/home/data > id uid=501(data) gid=100(users) groups=100(users),111(isdn)
data@charon:/mnt/zeus > ls -l drwxr-xr-x 4 data isdn 1024 Aug 6 13:13 import drwxr-s--- 22 root 108 1024 Jul 22 15:46 vwk
data@charon:/mnt/zeus > cd vwk bash: cd: vwk: Permission denied
If I do the same as root@charon, I get
charon:/root # cd /mnt/zeus/ charon:/mnt/zeus # pwd /mnt/zeus charon:/mnt/zeus # cd vwk bash: pwd: getcwd: cannot access parent directories: Permission denied charon: # pwd /mnt/zeus/vwk bash: pwd: getcwd: cannot access parent directories: Permission denied charon: # cd .. charon:/mnt/zeus # pwd /mnt/zeus
As one can see, the shell cd's to the directory nevertheless. I think with root-squash the result of an unpermitted operation should be the same for a root client and a non root client, or am I wrong? Why does the bash cd into the denied directory?
cu, Steffen
Steffen Rheinhold <srh@cc86.org>
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |