NFS Permissions

[freddymcwilliam]

Hello Everyone,

I'm struggling to understand permissions.

I created a pool
I created a dataset within it
I created a user "tom"
I made tom the owner of the dataset
I used the check boxes to give tom full access, and groups and everyone else got no access at all
I shared the dataset using NFS
Then I mounted the volume on my linux client

It mounted without an issue. Then I also had read and write access to it from my Linux machine. But how is this possible when I didn't log in with username "tom" and tom was the only person who had access??

 

[Basil Hendroff]

But how is this possible when I didn't log in with username "tom" and tom was the only person who had access??

Who did you log in as?

 

[freddymcwilliam]

Ahh yes, that is the thing I can't work out. At the moment I have the following entry in my fstab file, and it works, but how can know which user it is connecting has?? And How can I change which username and password is used?

192.168.42.240:/mnt/ExperimentPool/Dataset1 /home/freddy/FreeNASmini/Dataset1 nfs user 0 0

 

[Basil Hendroff]

Have a look at the maproot and mapall settings for the NFS share. Refer to the FreeNAS User Guide @ https://www.ixsystems.com/documentation/freenas/11.3-U2/sharing.html#unix-nfs-shares

 

[freddymcwilliam]

You are correct, I had mapped all to the same user!! So whoever I was connecting as, I would have been mapped to tom anyway...

But from a linux client, is it possible to chose which user to connect to the NFS share as?

 

[Basil Hendroff]

But from a linux client, is it possible to chose which user to connect to the NFS share as?

The UID/GID of the Linux user must match that of the FreeNAS user.

 

[freddymcwilliam]

Ohhhhh....thankyou!!!

And what about the password situation? If I am signed into my device as a user called "freddy" and there is a user on the NAS called freddy with the same username and same UID, then will I just connect as freddy? Or will I need to know the password of freddy on the NAS?

 

[Basil Hendroff]

As for SMB shares, where there's no AD involved, if you're configuring authenticated access with local users, the passwords must match.