NFSv4 permission denied for Superuser when opening directories
Applies to
- ONTAP 9
- NFSv4
- Export-Policy rule
Issue
- Can't access to directories as superuser, even if access is setup in export-policy rule:
Cluster::*> export-policy rule show -client client1 -instance
Vserver: svm1
Policy Name: policy1
Rule Index: 135
Access Protocol: any
List of Client Match Hostnames, IP Addresses, Netgroups, or Domains: client1
RO Access Rule: any
RW Access Rule: none
User ID To Which Anonymous Users Are Mapped: 0
Superuser Security Types: any
Honor SetUID Bits in SETATTR: true
Allow Creation of Devices: true
NTFS Unix Security Options: fail
Vserver NTFS Unix Security Options: use_export_policy
Change Ownership Mode: restricted
Vserver Change Ownership Mode: use_export_policy
Policy ID: 133143986179
- When accessing to directory, "permission denied" error is triggered:
vserver1:~ # mount /directory1
vserver1:~ # cd /vol1/dir1/dir2/dir3_old
Vserver1:/vol1/dir1/dir2/dir3_old # ll
total 8
drwxr-xr-x 2 root root 4096 Jun 15 2018 dir2
drwxr-x--- 13 root root 4096 Oct 5 2016 dir3
vserver1:/vserver/vol1/dir1 # cd dir2/
vserver1:/vserver/vol1/dir2 # cd ..
vserver1:/vserver/vol1/dir2 # cd dir3/
-bash: cd: dir3/: Permission denied
- Anonymous user is set to default:
Cluster::*> name-service unix-user show -vserver Svm1
(vserver services name-service unix-user show)
User User Group Full
Vserver Name ID ID Name
-------------- --------------- ------ ------ --------------------------------
Svm1 nobody 65535 65535
Svm1 pcuser 65534 65534
Svm1 root 0 1
3 entries were displayed.