Hi Tim,

> > > I have a NAS on my network and is accessed by two people [using
> > > NFS] and controlled by UAC set on the NAS.
> >
> > That `UAC', user-access control, sounds a bit worrying.

More so now.

>     mit@andora:~$ id -u; id -ru; id -g; id -G
>     1000
>     1000
>     1000
>     1000 4 24 27 30 46 118 128
...
>     karen@shuttle:~$ id -u; id -ru; id -g; id -G
>     1000
>     1000
>     1000
>     1000 20 24 25 27 29 30 44 46 100 104 107 113 114

As far as your two users' IDs and groups goes, they look fine.  You're
both 1000 on your personal machines and aren't running as a mix of real
and effective users.  (Being the same does cause problems when wanting
to shares common file storage though.)

>     mit@andora:/media/nas$ ls -lan
...
>     drwxrwxrwx  20  65534  4294967294   4096  May  6 16:42  video
>     d---------   4  65534  4294967294   4096  Mar 18 21:07  web
>
>     mit@andora:/media/nas$  getfacl -tn web
>     # file: web
>     USER   65534       ---
>     GROUP  4294967294  ---
>     other              ---
>
> The 5 folders I am having issues with are
>
...
>     Web

It's clear that directory ‘web’ offers no access permissions to user,
group, or other, the `---------' versus ‘videos’ `rwxrwxrwx' above it.
And getfacl backs that up and confirms there's no Linux ACL in play
separate to the normal file permissions.

>     karen@shuttle:/media/nas$ ls -lan
>     drwxrwxrwx   20  65534  4294967294   4096 May  6 16:42  video
>     drwxrwxrwx    4  65534  4294967294   4096 Mar 18 21:07  web
>
>     karen@shuttle:/media/nas$ getfacl -tn web
>     # file: web
>     USER   65534       rwx
>     GROUP  4294967294  rwx
>     other              rwx

Whereas for SWMBO, web matches video.  It's odd that the NAS is serving
different data to each machine.  Is the entry in each /etc/fstab the
same?  What's the output of this on both machines?

    awk '$2 == "/media/nas"' /proc/mounts

You mentioned directory ‘Ryan’ was also blocked for you.  That's because
it offers no permissions to other,

>     drwxrwx---   4  65534  4294967294   4096  Dec 10 19:54  Ryan

And since you're not user 65534 or group 4294967294, the traditional NFS
‘nobody’ users, you are checked against other.

You could try adding ‘noacl’ to the options in both /etc/fstabs for
/media/nas and then unmounting and mounting, but I don't think that
would help.  It seems more likely that the NAS is doing unwanted
fiddling, perhaps based on client IP address, and serving up different
results.  You need to poke about its GUI and beat it into shape.

(Ideally, you'd coordinate user and group IDs across all client machines
and the server and then you could access them using the matching user or
group permissions instead of other.)

-- 
Cheers, Ralph.

-- 
  Next meeting: BEC, Bournemouth, Tuesday, 2019-06-04 20:00
  Check to whom you are replying
  Meetings, mailing list, IRC, ...  http://dorset.lug.org.uk/
  New thread, don't hijack:  mailto:dorset@mailman.lug.org.uk

Reply via email to