{"id":4668,"date":"2014-11-27T15:32:14","date_gmt":"2014-11-27T14:32:14","guid":{"rendered":"http:\/\/www.b.shuttle.de\/hayek\/hayek\/jochen\/wp\/blog-en\/?p=4668"},"modified":"2014-11-27T15:32:14","modified_gmt":"2014-11-27T14:32:14","slug":"nfs-uid-mapping-without-nis-how-to-achieve-that-is-nfs-weaker-there-than-afs-and-samba","status":"publish","type":"post","link":"https:\/\/wp.jochen.hayek.name\/blog-en\/2014\/11\/27\/nfs-uid-mapping-without-nis-how-to-achieve-that-is-nfs-weaker-there-than-afs-and-samba\/","title":{"rendered":"NFS UID mapping without NIS \u2013 how to achieve that? is NFS weaker there than AFS and Samba?"},"content":{"rendered":"<ul>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/Network_File_System\">https:\/\/en.wikipedia.org\/wiki\/Network_File_System<\/a>\u00a0= NFS<\/li>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/Network_Information_Service\">https:\/\/en.wikipedia.org\/wiki\/Network_Information_Service<\/a>\u00a0= NIS<\/li>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/Andrew_File_System\">https:\/\/en.wikipedia.org\/wiki\/Andrew_File_System<\/a>\u00a0= AFS (Mac OS X)<\/li>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/CIFS\">https:\/\/en.wikipedia.org\/wiki\/CIFS<\/a>\u00a0AKA SMB AKA Samba<\/li>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/Unix_security#Root_squash\">https:\/\/en.wikipedia.org\/wiki\/Unix_security#Root_squash<\/a>\u00a0\u2013 re &#8220;root=\u2026&#8221;<\/li>\n<li><a href=\"http:\/\/linux.die.net\/man\/5\/exports\">http:\/\/linux.die.net\/man\/5\/exports<\/a>\u00a0\u2013 \/etc\/exports<\/li>\n<\/ul>\n<p>My (reduced) I.T. landscape:<\/p>\n<ul>\n<li>a Synology DiskStation NAS (with some Linux and &#8220;Busybox&#8221;) functions as an NFS server<\/li>\n<li><span style=\"font-size: 0.95em;line-height: 1.6em\">an openSUSE Linux VM is the relevant NFS client \u2013 the other clients don&#8217;t use NFS but AFS (for the Macs) and Samba (\u2026)<\/span><\/li>\n<\/ul>\n<p>True, I am not using NIS.<\/p>\n<p>True, my server and my client\u00a0don&#8217;t have the same values for corresponding users (UIDs).\u00a0Should I better &#8220;chown -R \u2026&#8221; the respective users&#8217; directory trees on the NAS in order to achieve the proper UID mapping?!?<\/p>\n<p>My NFS server does not accept &#8220;root=\u2026&#8221;.<\/p>\n<p>Is making brute force use of &#8220;anonuid=\u2026&#8221; on the server side (mapping all accesses from outside to a single user w\/o further proper authentication) the only (and admittedly unappropriate) way to achieve my goal then? Yes, I do have an idea of what anonuid should be used for.<\/p>\n<p>AFS and Samba seem to be able to deal with user accounts, that do not have the same UIDs on both sides \u2013 how to deal with that in the NFS context w\/o NIS?!?<\/p>\n<p>Update 2015-01-26: Simply use the relevant NAS users&#8217; UIDs also on the NFS clients. Get rid of all explicit UID squashing and mapping.\t\t\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>https:\/\/en.wikipedia.org\/wiki\/Network_File_System\u00a0= NFS https:\/\/en.wikipedia.org\/wiki\/Network_Information_Service\u00a0= NIS https:\/\/en.wikipedia.org\/wiki\/Andrew_File_System\u00a0= AFS (Mac OS X) https:\/\/en.wikipedia.org\/wiki\/CIFS\u00a0AKA SMB AKA Samba https:\/\/en.wikipedia.org\/wiki\/Unix_security#Root_squash\u00a0\u2013 re &#8220;root=\u2026&#8221; http:\/\/linux.die.net\/man\/5\/exports\u00a0\u2013 \/etc\/exports My (reduced) I.T. landscape: a Synology DiskStation NAS (with some Linux and &#8220;Busybox&#8221;) functions as an NFS server an openSUSE Linux VM is the relevant NFS client \u2013 the other clients don&#8217;t use NFS but AFS (for [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_share_on_mastodon":"0"},"categories":[575],"tags":[868],"class_list":["post-4668","post","type-post","status-publish","format-standard","hentry","category-synology","tag-afs"],"share_on_mastodon":{"url":"","error":""},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/paO0kP-1di","jetpack_likes_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/posts\/4668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/comments?post=4668"}],"version-history":[{"count":0,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/posts\/4668\/revisions"}],"wp:attachment":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/media?parent=4668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/categories?post=4668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/tags?post=4668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}