access rights depending on mount

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty margin-bottom:0;







up vote
1
down vote

favorite
1












I cannot access a directory and I don't understand why:



The user 'exchange' is in the right group and can access on non mounted dir application1_exchange_test but not application1_exchange. The only difference is that application1_exchange is a nfs mount.



root@application2-dev:/var/spool/application1_exchange/from# namei -mo `pwd`
f: /var/spool/application1_exchange/from
drwxr-xr-x root root /
drwxr-xr-x root root var
drwxr-xr-x root root spool
drwxrwx--- tomcat8 tomcat8 application1_exchange
drwxrwxr-x tomcat8 tomcat8 from

root@application2-dev:/var/spool/application1_exchange/from# su exchange

exchange@application2-dev:/var/spool/application1_exchange/from$ groups
exchange tomcat8

exchange@application2-dev:/var/spool/application1_exchange/from$ ls -ld . .. ../..
ls: cannot access '../..': Permission denied
drwxrwxr-x 3 tomcat8 tomcat8 4096 Jun 21 07:31 .
drwxrwx--- 11 tomcat8 tomcat8 4096 Jun 21 07:31 ..

exchange@application2-dev:/var/spool/application1_exchange/from$ cd /var/spool/application1_exchange
bash: cd: /var/spool/application1_exchange: Permission denied

exchange@application2-dev:/var/spool/application1_exchange/from$ cd /var/spool/

exchange@application2-dev:/var/spool$ ls -dl application1_exchange*
drwxrwx--- 11 tomcat8 tomcat8 4096 Jun 21 07:31 application1_exchange
drwxrwx--- 3 tomcat8 tomcat8 4096 Jul 9 11:08 application1_exchange_test

exchange@application2-dev:/var/spool$ ls -l application1_exchange*
ls: cannot open directory 'application1_exchange': Permission denied
application1_exchange_test:
total 4
drwxr-xr-x 3 tomcat8 tomcat8 4096 Jul 9 11:08 from

exchange@application2-dev:/var/spool$ findmnt /var/spool/application1_exchange
TARGET SOURCE FSTYPE OPTIONS
/var/spool/application1_exchange 192.168.1.1:/mnt/exchange nfs rw,relatime,sync,vers=3,rsize=262144,wsize=262144,namlen=255,hard,proto=tcp,timeo=600,


The ownership of the unmounted dir doesn't play any role. It was root but also with tomcat8 it the same.
The nfsd / export options are rw,no_root_squash,sync,no_subtree_check







share|improve this question





















  • The issue will most probably be to do with the nfs root_squash option that is implemented by default. I would suggest that you take a look at the man pages for "exports"
    – Raman Sailopal
    Jul 19 at 8:43










  • Can you unmount that filesystem and check the output of ls -dl application1_exchange ? On some operating systems, the permissions on the underlying mount point matter.
    – Mark Plotnick
    Jul 19 at 10:04
















up vote
1
down vote

favorite
1












I cannot access a directory and I don't understand why:



The user 'exchange' is in the right group and can access on non mounted dir application1_exchange_test but not application1_exchange. The only difference is that application1_exchange is a nfs mount.



root@application2-dev:/var/spool/application1_exchange/from# namei -mo `pwd`
f: /var/spool/application1_exchange/from
drwxr-xr-x root root /
drwxr-xr-x root root var
drwxr-xr-x root root spool
drwxrwx--- tomcat8 tomcat8 application1_exchange
drwxrwxr-x tomcat8 tomcat8 from

root@application2-dev:/var/spool/application1_exchange/from# su exchange

exchange@application2-dev:/var/spool/application1_exchange/from$ groups
exchange tomcat8

exchange@application2-dev:/var/spool/application1_exchange/from$ ls -ld . .. ../..
ls: cannot access '../..': Permission denied
drwxrwxr-x 3 tomcat8 tomcat8 4096 Jun 21 07:31 .
drwxrwx--- 11 tomcat8 tomcat8 4096 Jun 21 07:31 ..

exchange@application2-dev:/var/spool/application1_exchange/from$ cd /var/spool/application1_exchange
bash: cd: /var/spool/application1_exchange: Permission denied

exchange@application2-dev:/var/spool/application1_exchange/from$ cd /var/spool/

exchange@application2-dev:/var/spool$ ls -dl application1_exchange*
drwxrwx--- 11 tomcat8 tomcat8 4096 Jun 21 07:31 application1_exchange
drwxrwx--- 3 tomcat8 tomcat8 4096 Jul 9 11:08 application1_exchange_test

exchange@application2-dev:/var/spool$ ls -l application1_exchange*
ls: cannot open directory 'application1_exchange': Permission denied
application1_exchange_test:
total 4
drwxr-xr-x 3 tomcat8 tomcat8 4096 Jul 9 11:08 from

exchange@application2-dev:/var/spool$ findmnt /var/spool/application1_exchange
TARGET SOURCE FSTYPE OPTIONS
/var/spool/application1_exchange 192.168.1.1:/mnt/exchange nfs rw,relatime,sync,vers=3,rsize=262144,wsize=262144,namlen=255,hard,proto=tcp,timeo=600,


The ownership of the unmounted dir doesn't play any role. It was root but also with tomcat8 it the same.
The nfsd / export options are rw,no_root_squash,sync,no_subtree_check







share|improve this question





















  • The issue will most probably be to do with the nfs root_squash option that is implemented by default. I would suggest that you take a look at the man pages for "exports"
    – Raman Sailopal
    Jul 19 at 8:43










  • Can you unmount that filesystem and check the output of ls -dl application1_exchange ? On some operating systems, the permissions on the underlying mount point matter.
    – Mark Plotnick
    Jul 19 at 10:04












up vote
1
down vote

favorite
1









up vote
1
down vote

favorite
1






1





I cannot access a directory and I don't understand why:



The user 'exchange' is in the right group and can access on non mounted dir application1_exchange_test but not application1_exchange. The only difference is that application1_exchange is a nfs mount.



root@application2-dev:/var/spool/application1_exchange/from# namei -mo `pwd`
f: /var/spool/application1_exchange/from
drwxr-xr-x root root /
drwxr-xr-x root root var
drwxr-xr-x root root spool
drwxrwx--- tomcat8 tomcat8 application1_exchange
drwxrwxr-x tomcat8 tomcat8 from

root@application2-dev:/var/spool/application1_exchange/from# su exchange

exchange@application2-dev:/var/spool/application1_exchange/from$ groups
exchange tomcat8

exchange@application2-dev:/var/spool/application1_exchange/from$ ls -ld . .. ../..
ls: cannot access '../..': Permission denied
drwxrwxr-x 3 tomcat8 tomcat8 4096 Jun 21 07:31 .
drwxrwx--- 11 tomcat8 tomcat8 4096 Jun 21 07:31 ..

exchange@application2-dev:/var/spool/application1_exchange/from$ cd /var/spool/application1_exchange
bash: cd: /var/spool/application1_exchange: Permission denied

exchange@application2-dev:/var/spool/application1_exchange/from$ cd /var/spool/

exchange@application2-dev:/var/spool$ ls -dl application1_exchange*
drwxrwx--- 11 tomcat8 tomcat8 4096 Jun 21 07:31 application1_exchange
drwxrwx--- 3 tomcat8 tomcat8 4096 Jul 9 11:08 application1_exchange_test

exchange@application2-dev:/var/spool$ ls -l application1_exchange*
ls: cannot open directory 'application1_exchange': Permission denied
application1_exchange_test:
total 4
drwxr-xr-x 3 tomcat8 tomcat8 4096 Jul 9 11:08 from

exchange@application2-dev:/var/spool$ findmnt /var/spool/application1_exchange
TARGET SOURCE FSTYPE OPTIONS
/var/spool/application1_exchange 192.168.1.1:/mnt/exchange nfs rw,relatime,sync,vers=3,rsize=262144,wsize=262144,namlen=255,hard,proto=tcp,timeo=600,


The ownership of the unmounted dir doesn't play any role. It was root but also with tomcat8 it the same.
The nfsd / export options are rw,no_root_squash,sync,no_subtree_check







share|improve this question













I cannot access a directory and I don't understand why:



The user 'exchange' is in the right group and can access on non mounted dir application1_exchange_test but not application1_exchange. The only difference is that application1_exchange is a nfs mount.



root@application2-dev:/var/spool/application1_exchange/from# namei -mo `pwd`
f: /var/spool/application1_exchange/from
drwxr-xr-x root root /
drwxr-xr-x root root var
drwxr-xr-x root root spool
drwxrwx--- tomcat8 tomcat8 application1_exchange
drwxrwxr-x tomcat8 tomcat8 from

root@application2-dev:/var/spool/application1_exchange/from# su exchange

exchange@application2-dev:/var/spool/application1_exchange/from$ groups
exchange tomcat8

exchange@application2-dev:/var/spool/application1_exchange/from$ ls -ld . .. ../..
ls: cannot access '../..': Permission denied
drwxrwxr-x 3 tomcat8 tomcat8 4096 Jun 21 07:31 .
drwxrwx--- 11 tomcat8 tomcat8 4096 Jun 21 07:31 ..

exchange@application2-dev:/var/spool/application1_exchange/from$ cd /var/spool/application1_exchange
bash: cd: /var/spool/application1_exchange: Permission denied

exchange@application2-dev:/var/spool/application1_exchange/from$ cd /var/spool/

exchange@application2-dev:/var/spool$ ls -dl application1_exchange*
drwxrwx--- 11 tomcat8 tomcat8 4096 Jun 21 07:31 application1_exchange
drwxrwx--- 3 tomcat8 tomcat8 4096 Jul 9 11:08 application1_exchange_test

exchange@application2-dev:/var/spool$ ls -l application1_exchange*
ls: cannot open directory 'application1_exchange': Permission denied
application1_exchange_test:
total 4
drwxr-xr-x 3 tomcat8 tomcat8 4096 Jul 9 11:08 from

exchange@application2-dev:/var/spool$ findmnt /var/spool/application1_exchange
TARGET SOURCE FSTYPE OPTIONS
/var/spool/application1_exchange 192.168.1.1:/mnt/exchange nfs rw,relatime,sync,vers=3,rsize=262144,wsize=262144,namlen=255,hard,proto=tcp,timeo=600,


The ownership of the unmounted dir doesn't play any role. It was root but also with tomcat8 it the same.
The nfsd / export options are rw,no_root_squash,sync,no_subtree_check









share|improve this question












share|improve this question




share|improve this question








edited Jul 20 at 8:22
























asked Jul 19 at 8:36









Thomas Richter

83




83











  • The issue will most probably be to do with the nfs root_squash option that is implemented by default. I would suggest that you take a look at the man pages for "exports"
    – Raman Sailopal
    Jul 19 at 8:43










  • Can you unmount that filesystem and check the output of ls -dl application1_exchange ? On some operating systems, the permissions on the underlying mount point matter.
    – Mark Plotnick
    Jul 19 at 10:04
















  • The issue will most probably be to do with the nfs root_squash option that is implemented by default. I would suggest that you take a look at the man pages for "exports"
    – Raman Sailopal
    Jul 19 at 8:43










  • Can you unmount that filesystem and check the output of ls -dl application1_exchange ? On some operating systems, the permissions on the underlying mount point matter.
    – Mark Plotnick
    Jul 19 at 10:04















The issue will most probably be to do with the nfs root_squash option that is implemented by default. I would suggest that you take a look at the man pages for "exports"
– Raman Sailopal
Jul 19 at 8:43




The issue will most probably be to do with the nfs root_squash option that is implemented by default. I would suggest that you take a look at the man pages for "exports"
– Raman Sailopal
Jul 19 at 8:43












Can you unmount that filesystem and check the output of ls -dl application1_exchange ? On some operating systems, the permissions on the underlying mount point matter.
– Mark Plotnick
Jul 19 at 10:04




Can you unmount that filesystem and check the output of ls -dl application1_exchange ? On some operating systems, the permissions on the underlying mount point matter.
– Mark Plotnick
Jul 19 at 10:04















active

oldest

votes











Your Answer







StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);








 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f457156%2faccess-rights-depending-on-mount%23new-answer', 'question_page');

);

Post as a guest



































active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes










 

draft saved


draft discarded


























 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f457156%2faccess-rights-depending-on-mount%23new-answer', 'question_page');

);

Post as a guest













































































Popular posts from this blog

How to check contact read email or not when send email to Individual?

Christian Cage

How to properly install USB display driver for Fresco Logic FL2000DX on Ubuntu?