Issues with LDAP user/group permissions on NFS share Post: 302334869

Sponsored Content

Operating Systems Linux Red Hat Issues with LDAP user/group permissions on NFS share Post 302334869 by dfinn on Thursday 16th of July 2009 06:29:17 PM

07-16-2009

Registered User

Issues with LDAP user/group permissions on NFS share

I can't seem to make sense of this.

[sshaun@upilampdev ~]$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 5.2 Beta (Tikanga)
[sshaun@upilampdev ~]$
[sshaun@upilampdev ~]$ mount
/dev/sda2 on / type ext3 (rw)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
/dev/sda1 on /boot type ext3 (rw)
tmpfs on /dev/shm type tmpfs (rw)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)
upi-nasc:/vol/upilampdev/html on /var/www/html type nfs (rw,addr=192.168.43.9)
[sshaun@upilampdev ~]$
[sshaun@upilampdev ~]$ ls -ld /var/www/html/test-dir
drwxrwxr-x 2 apache web-developers 4096 Jul 16 2009 /var/www/html/test-dir
[sshaun@upilampdev ~]$
[sshaun@upilampdev ~]$ ls -ld /tmp/test-dir
drwxrwxr-x 2 apache web-developers 4096 Jul 16 16:07 /tmp/test-dir
[sshaun@upilampdev ~]$
[sshaun@upilampdev ~]$ id
uid=1010(sshaun) gid=2016(sshaun) groups=48(apache),1018(prod-ultradent),1022(prod-upijapan),1024(stage-distributornews),1032(stage-ultradent),1036(stage-upijapan),1052(stage-upiitaly),1066(stage-upibrazil),1067(stage-upispanish),1080(stage-upicroatia),1081(prod-upispanish),1084(prod-sfd),1085(stg-valo),1089(prod-scripts),1091(stg-upifrench),1092(stg-upidutch),1094(web-developers),1095(stg-upirussian),2016(sshaun)
[sshaun@upilampdev ~]$ getent group web-developers
web-developers:x:1094:aangela,wjonathan,sshaun
[sshaun@upilampdev ~]$
[sshaun@upilampdev ~]$
[sshaun@upilampdev ~]$ touch /tmp/test-dir/file
[sshaun@upilampdev ~]$
[sshaun@upilampdev ~]$ touch /var/www/html/test-dir/file
touch: cannot touch `/var/www/html/test-dir/file': Permission denied

What might be causing this? That NFS share is being mounted from a netapp and I don't believe it's being exported on there with any special options.

edit: and to make things even more weird this is only happening to 1 of the 4 users in the web-developers group

Thanks,
Dan

dfinn

View Public Profile for dfinn

Find all posts by dfinn

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

How can i copy user permissions(privileges) to a group

Hey there I have a problem and i was hoping that you guys could help me out I want to copy a user privileges to a group and i need to copy all privileges(Recursively) every directory with all its sub directories and I tried some solution and it did not work. I used the following command:- ...

2. AIX

NFS mounts and user permissions

We need to allow ordinary users to preform NFS mounts on a AIX server without giving them root access to the server. Is there a way to give an ordinary users root access on a tem basis or a script to allow them to preform NFS mounts?

3. Debian

webdav share per user ldap authentication

hi all, i have configured Apache with WEBDAV & my aim is sharing outlook calendars because we don't use M$ ExChange. From outlook i did a simple test & am able to share a calendar. I want to create share for each user & then authenticate against LDAP before they can publish their...

4. UNIX for Advanced & Expert Users

[Solved] nfs share permissions with java

Please bare with me while I try to explain this weird problem. We are exporting a filesystem from an aix box to two linux boxes. On the linux box a java-weblogic application hits the share. For explanation benefits I'll describe the users thus. aix filesystem owned by userA in groupA on...

5. Linux

Default user:group permissions while creating files and directories

Hi, I am working on setup a environment where only a specific user can upload the builds on htdocs of apache. Now i want that a specific user can copy the builds on htdocs folder. I created a group "deploy" and assign user1 and user2 to this group. On Apache side i mentioned User=deploy...

6. Web Development

Group and user permissions on mediawiki

I am working on setup a wiki which should have users and group having read or write permission. Before that we were using simple write to all methodology. Now the challenge is this that i have created a 3 users and all of the 3 are able to write to wiki and update the page. Now what i what to...

7. Red Hat

NFS share

Hi, I have an NFS server, i want to mount that nfs share which is having around 500GB to my client system. But my client system doesnt have any free space, is it possible to mount that nfs share in my client. Regards, Mastan

8. UNIX for Dummies Questions & Answers

Permissions for NFS share

Hi, I have created a NFS share in Solaris 10 server1 and mounted it on solaris 10 server 2.But I want to change owner of the files from nobody to a particular user in client. Which command should I use. I have tried the following but it doesn't allow to change permissions in the server2 as...

9. Red Hat

NFS share full access for local user

Hi All, Is it possible to give full access for a normal user in a NFS share? If its not possible is there a trick with which I can make it work? Thanks in advance Shyam

10. Shell Programming and Scripting

Mount NFS Share On NFS Client via bash script.

I need a help of good people with effective bash script to mount nfs shared, By the way I did the searches, since i haven't found that someone wrote a script like this in the past, I'm sure it will serve more people. The scenario as follow: An NFS Client with Daily CRON , running bash script...

LEARN ABOUT DEBIAN

dbs-edit-patch

DBS-EDIT-PATCH(1)						Debian Build System						 DBS-EDIT-PATCH(1)

NAME

       dbs-edit-patch - Edit a DBS patch

SYNOPSIS

       dbs-edit-patch [options] patch
       dbs-edit-patch -h|--help

DESCRIPTION

       dbs-edit-patch is script to generate or modify patches for Debian source-packages in DBS format.

WARNING

       dbs  is	deprecated,  please  switch  to  the  `3.0 (quilt)' Debian source package format instead. See http://wiki.debian.org/Projects/Deb-
       Src3.0#FAQ for a short guide how to do it.

OPTIONS

       -h, --help
	      Show summary of options.

       -t dir, --tmpdir=dir
	      Directory for the temporary files, default is /tmp or if set $TMP.

       -s dir, --sourcedir=dir
	      Top level directory of the debian-package source-tree, default is the present working directory.

       -P dir, --sourcepatchdir=dir
	      Directory containing upstream patches.

       -T dir, --sourcetardir=dir
	      Directory containing the upstream tarball.

       -p level, --strip=level
	      Striplevel -p of patch (Option -p of diff(1)), accepted values are 0 and 1, default is 0.

ENVIRONMENT VARIABLES

       TMP    Sets the directory for the temporary files, can be overridden with -t dir.

debian/vars
       dbs-edit-patch will automatically use variables defined in the optional debian/vars file.

       When a file debian/vars.in exists and debian/vars either does not exist or is older  than  any  of  the	following  files:  debian/vars.in,
       debian/changelog, debian/rules or debian/control, then dbs-edit-patch will try updating the vars file by running the following command
	   make -f debian/rules -W debian/vars.in debian/vars

EXAMPLES

       Edit the 021_debian patch of Heimdal:

	   ~/heimdal-0.3d> dbs-edit-patch -t/tmp 021_debian
	   Extracting source heimdal-0.3d.tar.gz ... successful.
	   Applying patch 001_replay ... successful.
	   etc.
	   Copying heimdal-0.3d to heimdal-0.3d-old ... successful.
	   Applying patch 021_debian ... successful.

       Edit  files under /tmp/021_debian/heimdal-0.3d as required, then put a short description into /tmp/021_debian/patch-description if desired,
       and finally execute /tmp/021_debian/dbs-update-patch to save the results.

       Technical  note:  dbs-edit-patch  extracts  all	patches  before  021_debian  into  /tmp/021_debian/heimdal-0.3d,  copies  the  result	to
       /tmp/021_debian/heimdal-0.3d-old,  and  applies the last patch 021_debian (if it exists). Also, it creates a shell script which will create
       the diff between the old and new directories:

	   ~/heimdal-0.3d> ls -la /tmp/021_debian
	   total 12
	   -rwxr-xr-x	 1 bam	    users	  112 Jan 31 13:31 dbs-update-patch*
	   -rw-r--r--	 1 bam	    users	    0 Jan 31 13:31 patch-description
	   drwxr-xr-x	14 bam	    users	 4096 Jan 31 13:31 heimdal-0.3d/
	   drwxr-xr-x	14 bam	    users	 4096 Jan 31 13:31 heimdal-0.3d-old/
	   drwxr-xr-x	 5 bam	    users	 4096 Jan 31 13:31 .stampdir/

	   ~/heimdal-0.3d> cat /tmp/021_debian/dbs-update-patch
	   #!/bin/sh -e
	   cd "/tmp/021_debian"
	   HOOK_DIR="/usr/src/heimdal/debian/dbs-hooks"
	   test -d "$HOOK_DIR" && run-parts "$HOOK_DIR" --arg update-patch-prediff
	   find -name "*.bak" -print0 | xargs -0 --no-run-if-empty rm
	   find -name "*~" -print0 | xargs -0 --no-run-if-empty rm
	   : > new_patch
	   test ! -e patch-description || cp patch-description new_patch
	   diff -ruN heimdal-0.3d-old heimdal-0.3d >> new_patch || test $? -eq 1
	   mv new_patch  /usr/src/heimdal/debian/patches/021_debian
	   test -d "$HOOK_DIR" && run-parts "$HOOK_DIR" --arg update-patch-postdiff

SEE ALSO

       diff(1), dbs(7), /usr/share/doc/dbs/

AUTHOR

       DBS was written by Adam Heath, modified by Ben Collins, modified and packaged for Debian by  Brian  May.  This  manpage	was  generated	by
       Andreas Metzler and modified by Robert Luberda.

Debian								February 15th, 2011						 DBS-EDIT-PATCH(1)