{"id":4614,"date":"2014-11-26T03:49:54","date_gmt":"2014-11-26T02:49:54","guid":{"rendered":"http:\/\/www.b.shuttle.de\/hayek\/hayek\/jochen\/wp\/blog-en\/?p=4614"},"modified":"2014-11-26T03:49:54","modified_gmt":"2014-11-26T02:49:54","slug":"synology-diskstation-as-nfs-server","status":"publish","type":"post","link":"https:\/\/wp.jochen.hayek.name\/blog-en\/2014\/11\/26\/synology-diskstation-as-nfs-server\/","title":{"rendered":"using a Synology DiskStation as an NFS4 server \u2013 client is an openSUSE in a virtual machine"},"content":{"rendered":"<p>\t\t\t\tFacts (smile!):<\/p>\n<ul>\n<li>the Synology DSM NFS server keeps its &#8220;mount information files&#8221; (etab, rmtab, \u2026) at\u00a0\/var\/lib\/nfs\/rmtab as opposed to \/etc, where they &#8220;usually&#8221; go<\/li>\n<li>make sure, that\u00a0\/var\/lib\/nfs\/rmtab exists, otherwise you will find ongoing complaints in \/var\/log\/messages; a &#8220;touch \u2026\/rmtab&#8221; will do<\/li>\n<li>\u2026<\/li>\n<\/ul>\n<p>&#8220;Last resort&#8221; resp. &#8220;desaster&#8221; suggestions \u2013 they should always only be of temporary use:<\/p>\n<ul>\n<li>within \/etc\/exports set anonuid to the UID of the server-local user, that &#8220;deals&#8221; with the files in question<\/li>\n<li>\u2026<\/li>\n<\/ul>\n<p>I have tried quite a few variations, currently it seems to run (DO NOT TAKE THAT TOO LITERALLY!!!), but I am not very sure, why, and what the implications are.<\/p>\n<ul>\n<li><a href=\"http:\/\/forum.synology.com\/wiki\/index.php\/How_to_enable_NFS_on_the_Synology_Server\">http:\/\/forum.synology.com\/wiki\/index.php\/How_to_enable_NFS_on_the_Synology_Server<\/a>\u00a0\u2013 looks a little outdated, but the suggestion to &#8220;touch \/var\/lib\/nfs\/rmtab&#8221;, so that &#8220;\/usr\/sbin\/exportfs -a&#8221; (in order to make your changes to \/etc\/exports effective) would not result in an annoying entry in \/var\/log\/messages, is quite nice<\/li>\n<li>replacing no_root_squash with all_squash within \/etc\/exports and &#8220;\u2026\/exportfs -a&#8221; seems to help tremendously, setting &#8220;squash&#8221; to &#8220;no mapping&#8221; is not the same; looks like you can&#8217;t achieve the wished purpose through the web GUI<\/li>\n<\/ul>\n<p>Update 2015-01-26 \/ 0: \/etc\/idmap.conf \u2013 but the respective software on openSuSE seems to have problems.<\/p>\n<p>Update 2015-01-26 \/ 1:<\/p>\n<ul>\n<li>no more UID squashing or mapping within the DSM GUI,<\/li>\n<li><span style=\"line-height: 1.6471\">no more changes to \/etc\/exports on the NAS &#8220;under the hood&#8221;,<\/span><\/li>\n<li><span style=\"line-height: 1.6471\">simple vanilla &#8220;Squash: No mapping&#8221; within the DSM GUI;<\/span><\/li>\n<li><span style=\"line-height: 1.6471\">ie. the respective UIDs on the NFS server and the NFS clients must match 1:1. <\/span><\/li>\n<li><span style=\"line-height: 1.6471\">It is quite simple to rectify this on the NFS clients. <\/span><\/li>\n<li><span style=\"line-height: 1.6471\">I have no idea, why I hesitated doing that from the beginning (when I started using the Synology devices as NFS servers).<\/span><\/li>\n<li><span style=\"line-height: 1.6471\">For the time being this is &#8220;the proper way&#8221; here. <\/span><\/li>\n<li><span style=\"line-height: 1.6471\">For the &#8220;better future&#8221; of course implementation of a Kerberos set-up is the way to go:<\/span><\/li>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/Kerberos_(protocol)\">https:\/\/en.wikipedia.org\/wiki\/Kerberos_(protocol)<\/a><\/li>\n<li><a href=\"http:\/\/linux.die.net\/man\/5\/exports\">http:\/\/linux.die.net\/man\/5\/exports<\/a> \u2013 \/etc\/exports<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Facts (smile!): the Synology DSM NFS server keeps its &#8220;mount information files&#8221; (etab, rmtab, \u2026) at\u00a0\/var\/lib\/nfs\/rmtab as opposed to \/etc, where they &#8220;usually&#8221; go make sure, that\u00a0\/var\/lib\/nfs\/rmtab exists, otherwise you will find ongoing complaints in \/var\/log\/messages; a &#8220;touch \u2026\/rmtab&#8221; will do \u2026 &#8220;Last resort&#8221; resp. &#8220;desaster&#8221; suggestions \u2013 they should always only be of temporary [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false,"_share_on_mastodon":"0"},"categories":[575],"tags":[],"class_list":["post-4614","post","type-post","status-publish","format-standard","hentry","category-synology"],"share_on_mastodon":{"url":"","error":""},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/paO0kP-1cq","jetpack_likes_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/posts\/4614","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/comments?post=4614"}],"version-history":[{"count":0,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/posts\/4614\/revisions"}],"wp:attachment":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/media?parent=4614"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/categories?post=4614"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/tags?post=4614"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}