Skip to main content
NetApp Knowledge Base

NFS users have permission issues when they belong to more than 16 groups

  1. Last updated
  2. Save as PDF
Views:
4,279
Visibility:
Public
Votes:
1
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

  • ONTAP 9
  • NFS

Issue

  • NFS user can access some folder/files, but for other folder/files get " Permission denied".

[d3867804@hkl2016xxxx ~]$ cd /vol/lun_netapp/sasxxx_split/AMH
-bash: cd: /vol/lun_netapp/sasxxx_split/AMH: Permission denied

  • NFS export is mounted with auth=sys
  • The users belong to more than 16 groups.
    • Running the id command on the Linux/Unix client shows the full list of the Unix user's auxiliary groups
  • nfs credentials show shows that ONTAP does not have the full list of the Unix user's auxiliary groups
  • vserver security trace says that Access is denied by Unix permissions

  • auth-sys-extended-groups option is disabled on the vserver.

    ::> set -privilege advanced
    Warning: These advanced commands are potentially dangerous; use
             them only when directed to do so by NetApp personnel.
    Do you want to continue? {y|n}: y

    ::*> vserver nfs show -vserver vs1 -fields auth-sys-extended-groups,extended-groups-limit
    vserver auth-sys-extended-groups extended-groups-limit
    ------- ------------------------ ---------------------
    vs1     disabled                  

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.