<html><body><p><font face="Arial">Make sure NFSv4 ID Mapping value matches on client and server.</font><br><br><font face="Arial">On server side (i.e. CES nodes); you can set as below:</font><br><br><font face="Arial"> $ mmnfs config change IDMAPD_DOMAIN=test.com</font><br><br><font face="Arial">On client side (e.g. RHEL NFS client); one can set it using Domain attribute in /etc/idmapd.conf file.</font><br><br><font face="Arial"> $ egrep ^Domain /etc/idmapd.conf</font><br><font face="Arial"> Domain = test.com</font><br><font face="Arial"> [root@rh73node2 2018_05_07-13:31:11 ~]$</font><br><font face="Arial"> $ service nfs-idmap restart</font><br><br><font face="Arial">Please refer following link for the details: </font><br><a href="https://www.ibm.com/support/knowledgecenter/en/STXKQY_5.0.0/com.ibm.spectrum.scale.v5r00.doc/b1ladm_authconsidfornfsv4access.htm"><font face="Arial">https://www.ibm.com/support/knowledgecenter/en/STXKQY_5.0.0/com.ibm.spectrum.scale.v5r00.doc/b1ladm_authconsidfornfsv4access.htm</font></a><br><br><font face="Arial">Thanks,</font><br><font face="Arial">Chetan.</font><br><br><img width="16" height="16" src="cid:1__=EABB0815DFB866CB8f9e8a93df938690918cEAB@" border="0" alt="Inactive hide details for "Yaron Daniel" ---05/07/2018 10:46:32 AM---Hi If you want to use NFSv3 , define only NFSv3 on the exp"><font size="2" color="#424282">"Yaron Daniel" ---05/07/2018 10:46:32 AM---Hi If you want to use NFSv3 , define only NFSv3 on the export.</font><br><br><font size="2" color="#5F5F5F">From: </font><font size="2">"Yaron Daniel" <YARD@il.ibm.com></font><br><font size="2" color="#5F5F5F">To: </font><font size="2">gpfsug main discussion list <gpfsug-discuss@spectrumscale.org></font><br><font size="2" color="#5F5F5F">Date: </font><font size="2">05/07/2018 10:46 AM</font><br><font size="2" color="#5F5F5F">Subject: </font><font size="2">Re: [gpfsug-discuss] CES NFS export</font><br><font size="2" color="#5F5F5F">Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr width="100%" size="2" align="left" noshade style="color:#8091A5; "><br><br><br><font size="2">Hi</font><br><font size="2"><br>If you want to use NFSv3 , define only NFSv3 on the export.<br>In case you work with NFSv4 - you should have "DOMAIN\user" all the way - so this way you will not get any user mismatch errors, and see permissions like nobody.</font><br><br><font size="2" face="Arial"><br> </font><font size="2" face="Arial"><br>Regards</font><font size="2" face="Arial"><br> </font><table border="0" cellspacing="0" cellpadding="0"><tr valign="top"><td width="619" colspan="4" valign="middle"><div align="center"><hr width="100%" size="2" align="center" noshade></div><font size="1" face="Arial"><br> </font></td></tr>
<tr valign="top"><td width="619" colspan="4" valign="middle"><font size="1" face="Arial"> </font></td></tr>
<tr valign="top"><td width="409" colspan="2" valign="middle"><b><font size="2" color="#0000FF" face="Arial">Yaron Daniel</font></b></td><td width="133" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> 94 Em Ha'Moshavot Rd</font></td><td width="77" rowspan="3" valign="middle"><div align="right"><img src="cid:2__=EABB0815DFB866CB8f9e8a93df938690918cEAB@" width="70" height="24" align="bottom"></div></td></tr>
<tr valign="top"><td width="409" colspan="2" valign="middle"><b><font size="2" color="#0000FF" face="Arial">Storage Architect</font></b></td><td width="133" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> Petach Tiqva, 49527</font></td></tr>
<tr valign="top"><td width="409" colspan="2" valign="middle"><b><font size="2" color="#0000FF" face="Arial">IBM Global Markets, Systems HW Sales</font></b></td><td width="133" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> Israel</font></td></tr>
<tr valign="top"><td width="409" colspan="2" valign="middle"><b><font size="2" color="#0000FF" face="Arial"> </font></b></td><td width="133" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> </font></td><td width="77" valign="middle"><font size="2" face="Arial"> </font></td></tr>
<tr valign="top"><td width="71" valign="middle"><font size="2" color="#5F5F5F" face="Arial">Phone:</font></td><td width="336" valign="middle"><font size="2" color="#5F5F5F" face="Arial">+972-3-916-5672</font></td><td width="133" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> </font></td><td width="77" valign="middle"><font size="2"> </font></td></tr>
<tr valign="top"><td width="71" valign="middle"><font size="2" color="#5F5F5F" face="Arial">Fax:</font></td><td width="336" valign="middle"><font size="2" color="#5F5F5F" face="Arial">+972-3-916-5672</font></td><td width="133" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> </font></td><td width="77" valign="middle"><font size="2"> </font></td></tr>
<tr valign="top"><td width="71" valign="middle"><font size="2" color="#5F5F5F" face="Arial">Mobile:</font></td><td width="336" valign="middle"><font size="2" color="#5F5F5F" face="Arial">+972-52-8395593</font></td><td width="133" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> </font></td><td width="77" valign="middle"><font size="2"> </font></td></tr>
<tr valign="top"><td width="71" valign="middle"><font size="2" color="#5F5F5F" face="Arial">e-mail:</font></td><td width="336" valign="middle"><font size="2" color="#5F5F5F" face="Arial">yard@il.ibm.com</font></td><td width="133" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> </font></td><td width="77" valign="middle"><font size="2"> </font></td></tr>
<tr valign="top"><td width="409" colspan="2" valign="middle"><a href="http://www.ibm.com/il/he/"><u><font size="2" color="#0000FF" face="Arial">IBM Israel</font></u></a></td><td width="133" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> </font></td><td width="77" valign="middle"><font size="2"> </font></td></tr>
<tr valign="top"><td width="619" colspan="4" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> </font></td></tr>
<tr valign="top"><td width="619" colspan="4" valign="middle"><font size="2" color="#5F5F5F" face="Arial"> </font></td></tr></table><br><img src="cid:3__=EABB0815DFB866CB8f9e8a93df938690918cEAB@" width="110" height="110" alt="IBM Storage Strategy and Solutions v1"><img src="cid:4__=EABB0815DFB866CB8f9e8a93df938690918cEAB@" width="110" height="110" alt="IBM Storage Management and Data Protection v1"><img src="cid:5__=EABB0815DFB866CB8f9e8a93df938690918cEAB@" width="110" height="109"><img src="cid:6__=EABB0815DFB866CB8f9e8a93df938690918cEAB@" width="110" height="110"> <img src="cid:7__=EABB0815DFB866CB8f9e8a93df938690918cEAB@" width="331" height="178" alt="Related image"><br><br><br><font size="2" color="#5F5F5F"><br>From: </font><font size="2">Jagga Soorma <jagga13@gmail.com></font><font size="2" color="#5F5F5F"><br>To: </font><font size="2">gpfsug-discuss@spectrumscale.org</font><font size="2" color="#5F5F5F"><br>Date: </font><font size="2">05/07/2018 06:05 AM</font><font size="2" color="#5F5F5F"><br>Subject: </font><font size="2">Re: [gpfsug-discuss] CES NFS export</font><font size="2" color="#5F5F5F"><br>Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr width="100%" size="2" align="left" noshade><br><br><tt><font size="2"><br>Looks like this is due to nfs v4 and idmapd domain not being<br>configured correctly. I am going to test further and reach out if<br>more assistance is needed.<br><br>Thanks!<br><br>On Sun, May 6, 2018 at 6:35 PM, Jagga Soorma <jagga13@gmail.com> wrote:<br>> Hi Guys,<br>><br>> We are new to gpfs and have a few client that will be mounting gpfs<br>> via nfs. We have configured the exports but all user/group<br>> permissions are showing up as nobody. The gateway/protocol nodes can<br>> query the uid/gid's via centrify without any issues as well as the<br>> clients and the perms look good on a client that natively accesses the<br>> gpfs filesystem. Is there some specific config that we might be<br>> missing?<br>><br>> --<br>> # mmnfs export list --nfsdefs /gpfs/datafs1<br>> Path Delegations Clients<br>> Access_Type Protocols Transports Squash Anonymous_uid<br>> Anonymous_gid SecType PrivilegedPort DefaultDelegations Manage_Gids<br>> NFS_Commit<br>> -----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br>> /gpfs/datafs1 NONE {nodenames} RW 3,4 TCP<br>> ROOT_SQUASH -2 -2 SYS FALSE NONE<br>> TRUE FALSE<br>> /gpfs/datafs1 NONE {nodenames} RW 3,4<br>> TCP NO_ROOT_SQUASH -2 -2 SYS FALSE<br>> NONE TRUE FALSE<br>> /gpfs/datafs1 NONE {nodenames} RW 3,4 TCP<br>> ROOT_SQUASH -2 -2 SYS FALSE<br>> NONE TRUE FALSE<br>> --<br>><br>> On the nfs clients I see this though:<br>><br>> --<br>> # ls -l<br>> total 0<br>> drwxrwxr-t 3 nobody nobody 4096 Mar 20 09:19 dir1<br>> drwxr-xr-x 4 nobody nobody 4096 Feb 9 17:57 dir2<br>> --<br>><br>> Here is our mmnfs config:<br>><br>> --<br>> # mmnfs config list<br>><br>> NFS Ganesha Configuration:<br>> ==========================<br>> NFS_PROTOCOLS: 3,4<br>> NFS_PORT: 2049<br>> MNT_PORT: 0<br>> NLM_PORT: 0<br>> RQUOTA_PORT: 0<br>> NB_WORKER: 256<br>> LEASE_LIFETIME: 60<br>> DOMAINNAME: VIRTUAL1.COM<br>> DELEGATIONS: Disabled<br>> ==========================<br>><br>> STATD Configuration<br>> ==========================<br>> STATD_PORT: 0<br>> ==========================<br>><br>> CacheInode Configuration<br>> ==========================<br>> ENTRIES_HWMARK: 1500000<br>> ==========================<br>><br>> Export Defaults<br>> ==========================<br>> ACCESS_TYPE: NONE<br>> PROTOCOLS: 3,4<br>> TRANSPORTS: TCP<br>> ANONYMOUS_UID: -2<br>> ANONYMOUS_GID: -2<br>> SECTYPE: SYS<br>> PRIVILEGEDPORT: FALSE<br>> MANAGE_GIDS: TRUE<br>> SQUASH: ROOT_SQUASH<br>> NFS_COMMIT: FALSE<br>> ==========================<br>><br>> Log Configuration<br>> ==========================<br>> LOG_LEVEL: EVENT<br>> ==========================<br>><br>> Idmapd Configuration<br>> ==========================<br>> LOCAL-REALMS: LOCALDOMAIN<br>> DOMAIN: LOCALDOMAIN<br>> ==========================<br>> --<br>><br>> Thanks!<br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org</font></tt><u><font color="#0000FF"><br></font></u><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwMFAg&c=jf_iaSHvJObTbx-siA1ZOg&r=uic-29lyJ5TCiTRi0FyznYhKJx5I7Vzu80WyYuZ4_iM&m=3k9qWcL7UfySpNVW2J8S1XsIekUHTHBBYQhN7cPVg3Q&s=844KFrfpsN6nT-DKV6HdfS8EEejdwHuQxbNR8cX2cyc&e="><tt><u><font size="2" color="#0000FF">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</font></u></tt></a><tt><font size="2"><br></font></tt><br><br><br><tt><font size="2">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></font></tt><tt><font size="2"><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=uic-29lyJ5TCiTRi0FyznYhKJx5I7Vzu80WyYuZ4_iM&m=3k9qWcL7UfySpNVW2J8S1XsIekUHTHBBYQhN7cPVg3Q&s=844KFrfpsN6nT-DKV6HdfS8EEejdwHuQxbNR8cX2cyc&e=">https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=uic-29lyJ5TCiTRi0FyznYhKJx5I7Vzu80WyYuZ4_iM&m=3k9qWcL7UfySpNVW2J8S1XsIekUHTHBBYQhN7cPVg3Q&s=844KFrfpsN6nT-DKV6HdfS8EEejdwHuQxbNR8cX2cyc&e=</a></font></tt><tt><font size="2"><br></font></tt><p><p><BR>
</body></html>