root用户因root用户强制转换而被拒绝访问NTFS卷
适用场景
- ONTAP 9
- NFSv3
问题描述
- NFSv3客户端root用户可以挂载NTFS卷、但
permission denied
无法访问该卷
[root@cliet1 ~]# cd /mnt/ontap_share -bash: cd: /mnt/ontap_share: Permission denied
- root用户已配置正确的名称映射
- 在导出策略规则中、超级用户安全类型设置为none
::> export-policy rule show -vserver svm1 -clientmatch nfsclient1 -fields vserver,ruleindex,clientmatch,superuser,protocol,policyname,anon
vserver policyname ruleindex protocol clientmatch anon superuser
------------------ ----------- --------- -------- ------------------------- ----- ---------
svm1 policy1 20 nfs nfsclient1.ntap.local 65534 none
Security trace
access denied
匿名用户上显示、表示root用户已强制转换为UID为 6554的匿名用户
Node Index Filter Details Reason
--------------- ----- -------------------------- ----------------------------------------------------------------
node1 1 Security Style: NTFS and Access is denied because the UNIX user could not be NT ACL mapped to a valid NT user while reading the user's access rights on an object.
Protocol: nfs
Volume: vol1
Share: -
Path: /data/
Win-User: -
UNIX-User: 65534
Session-ID: -