跳转到主内容

root用户因root用户强制转换而被拒绝访问NTFS卷

Views:
5
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas<a>2009630334</a>
Last Updated:

适用场景

  • ONTAP 9
  • NFSv3

问题描述

  • NFSv3客户端root用户可以挂载NTFS卷、但 permission denied 无法访问该卷
[root@cliet1 ~]# cd /mnt/ontap_share -bash: cd: /mnt/ontap_share: Permission denied
  • root用户已配置正确的名称映射
  • 在导出策略规则中、超级用户安全类型设置为none
::> export-policy rule show -vserver svm1 -clientmatch nfsclient1 -fields vserver,ruleindex,clientmatch,superuser,protocol,policyname,anon
vserver       policyname  ruleindex protocol clientmatch      anon  superuser
------------------ ----------- --------- -------- ------------------------- ----- ---------
svm1         policy1   20     nfs    nfsclient1.ntap.local 65534 none
 
  • Security trace access denied 匿名用户上显示、表示root用户已强制转换为UID为 6554的匿名用户
Node       Index Filter Details       Reason
--------------- ----- -------------------------- ----------------------------------------------------------------
node1      1   Security Style: NTFS and  Access is denied because the UNIX user could not be                       NT ACL                     mapped to a valid NT user while reading the user's access rights                                                  on an object.
            Protocol: nfs
            Volume: vol1
            Share: -
            Path: /data/
            Win-User: -
           UNIX-User: 65534
            Session-ID: -

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.