メインコンテンツまでスキップ

アクセスが拒否されたためUNIX rootユーザがNTFSボリュームをマウントできない

Views:
1,024
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas<a>clustered Data ONTAP 8.3</a><a>1008484</a>
Last Updated:

環境

  • ONTAP 9
  • NFSv3

問題

  • NFSv3を使用してNFSエクスポートをマウントする root と失敗し、アクセスが拒否されます。 

# mount nfsserver:/vtest/qtest /mnt
mount.nfs: access denied by server while mounting nfsserver:/vtest/qtest

  • エクスポートされたボリューム(またはqtree)のセキュリティ形式がNTFSである
  • SVMのCIFS監査が有効になっています::> vserver audit show -vserver svm1​​​​​​
  • 明示的なユーザマッピングが設定されてい

例: UNIXユーザ oracle がWindowsユーザにマッピングされる NASLAB-CORP\ORACLE_Windows_userが、 root userのエントリはない

  • ネームマッピング:

::> vserver name-mapping show -vserver svm1
Vserver        Direction Position    
-------------- --------- -------- 
svm1   unix-win  1        Pattern: oracle
                              Replacement: NASLAB-CORP\ORACLE_Windows_user

  • エクスポートポリシーでクライアントへのアクセスを許可:

::> check-access -vserver svm1 -volume vtest -qtree qtest -client-ip 10.xx.xx.xx -authentication-method sys -protocol nfs3 -access-type read-write
  (vserver export-policy check-access)
                                         Policy    Policy       Rule
Path                          Policy     Owner     Owner Type  Index Access
----------------------------- ---------- --------- ---------- ------ ----------
/                             root_policy
                                         svm1_root
                                                   volume          1 read
/vtest                   root_policy
                                         vtest
                                                   volume          1 read
/vtest/qtest
                              root_policy
                                         qtest
                                                   qtree           6 read-write
3 entries were displayed.

  • パケットトレースは 、マウントは成功したが、fsinfoコールが次のエラーで失敗することを示します。

438.9431500.00056210.xx.xx.yy10.xx.xx.xx    162 MOUNT AUTH_UNIX,AUTH_NULL     V3 MNT Call (Reply In 44) /vtest
448.9432930.00014310.xx.xx.xx10.xx.xx.yy    138 MOUNT AUTH_NULL          V3 MNT Reply (Call In 43)
638.9474380.00059810.xx.xx.yy10.xx.xx.xx    226 NFS  AUTH_UNIX,AUTH_NULL       V3 FSINFO Call (Reply In 64), FH: 0x4c220357
648.9476590.00022110.xx.xx.xx10.xx.xx.yy    106 NFS  AUTH_NULL NFS3ERR_ACCES    V3 FSINFO Reply

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.