mount.nfs acesso negado pelo servidor

2

Aqui estão os passos que tomei até agora:

server01 # apt-get install nfs-kernel-server
server01 # mkdir /home/acoder/Public
server01 # vi /etc/fstab

Encontrei algumas informações úteis quando "grepped":

/var/log/syslog:Dec 17 13:57:58 server01 rpc.mountd[9918]: Version 1.2.8 starting
/var/log/syslog:Dec 17 14:04:55 server01 rpc.mountd[9918]: refused mount request from 1.2.3.77 for /public/ (/public): unmatched host
/var/log/syslog:Dec 17 14:49:44 server01 rpc.mountd[9918]: message repeated 8 times: [ refused mount request from 1.2.3.77 for /public/ (/public): unmatched host]
/var/log/syslog:Dec 17 14:51:49 server01 rpc.mountd[9918]: Caught signal 15, un-registering and exiting.
/var/log/syslog:Dec 17 14:51:50 server01 rpc.mountd[18437]: Version 1.2.8 starting
/var/log/syslog:Dec 17 14:52:00 server01 rpc.mountd[18437]: refused mount request from 1.2.3.77 for /public/ (/public): unmatched host
/var/log/syslog:Dec 17 14:53:32 server01 rpc.mountd[18437]: message repeated 2 times: [ refused mount request from 1.2.3.77 for /public/ (/public): unmatched host]
/var/log/syslog:Dec 17 15:48:17 server01 rpc.mountd[18437]: refused mount request from 1.2.3.77 for /export/public (/export/public): unmatched host

Aqui está a saída de showmount -e 1.2.3.4 no cliente:

Export list for 1.2.3.4:
/export/public 192.168.1.0/24
/export 192.168.1.0/24

Acho que também tenho acesso negado ao tentar montar o compartilhamento nfs no próprio servidor:

\# mount -t nfs -o proto=tcp,port=2049 localhost:/export/public/ /mnt/server01public/
mount.nfs: access denied by server while mounting localhost:/export/public/


    # added the following line
    /home/acoder/Public    /export/public   none    bind  0  0

server01 # ifconfig
    eth0      Link encap:Ethernet  HWaddr d0:67:e5:3f:fa:82  
              inet addr:1.2.3.4  Bcast:1.2.3.255  Mask:255.255.255.0
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              RX packets:53009 errors:0 dropped:0 overruns:0 frame:0
              TX packets:32395 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:1000 
              RX bytes:39888803 (39.8 MB)  TX bytes:4382214 (4.3 MB)
              Interrupt:20 Memory:e3900000-e3920000 

    lo        Link encap:Local Loopback  
              inet addr:127.0.0.1  Mask:255.0.0.0
              inet6 addr: ::1/128 Scope:Host
              UP LOOPBACK RUNNING  MTU:65536  Metric:1
              RX packets:23485 errors:0 dropped:0 overruns:0 frame:0
              TX packets:23485 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:0 
              RX bytes:2612596 (2.6 MB)  TX bytes:2612596 (2.6 MB)


server01 # vi /etc/exports

    # added the following lines
    /export       192.168.1.0/24(rw,fsid=0,insecure,no_subtree_check,async,no_root_squash)
    /export/public 192.168.1.0/24(rw,nohide,insecure,no_subtree_check,async,no_root_squash)

server01 # mkdir -p /export/public
server01 # chmod 777 /export/
server01 # chmod 777 /export/public/

server01 # exportfs -a
server01 # service nfs-kernel-server restart

server01 # showmount -e
Export list for server01:
/export/public 192.168.1.0/24
/export        192.168.1.0/24

Agora para o cliente:

client01 # mkdir /mnt/server01public
client01 # mount -t nfs -o proto=tcp,port=2049 1.2.3.4:/public/ /mnt/server01public/

mount.nfs: access denied by server while mounting 1.2.3.4:/public/

Eu desliguei o firewall do servidor (ele está na minha rede doméstica local) e ainda recebo o mesmo erro.

0 O que estou perdendo?

Editar 1

Acho que também tenho acesso negado ao tentar montar o compartilhamento nfs no próprio servidor:

\# mount -t nfs -o proto=tcp,port=2049 localhost:/export/public/ /mnt/server01public/
mount.nfs: access denied by server while mounting localhost:/export/public/

Editar 2

Encontrei algumas informações úteis quando o "mount" em / var / log / *:

/var/log/syslog:Dec 17 13:57:58 server01 rpc.mountd[9918]: Version 1.2.8 starting
/var/log/syslog:Dec 17 14:04:55 server01 rpc.mountd[9918]: refused mount request from 1.2.3.77 for /public/ (/public): unmatched host
/var/log/syslog:Dec 17 14:49:44 server01 rpc.mountd[9918]: message repeated 8 times: [ refused mount request from 1.2.3.77 for /public/ (/public): unmatched host]
/var/log/syslog:Dec 17 14:51:49 server01 rpc.mountd[9918]: Caught signal 15, un-registering and exiting.
/var/log/syslog:Dec 17 14:51:50 server01 rpc.mountd[18437]: Version 1.2.8 starting
/var/log/syslog:Dec 17 14:52:00 server01 rpc.mountd[18437]: refused mount request from 1.2.3.77 for /public/ (/public): unmatched host
/var/log/syslog:Dec 17 14:53:32 server01 rpc.mountd[18437]: message repeated 2 times: [ refused mount request from 1.2.3.77 for /public/ (/public): unmatched host]
/var/log/syslog:Dec 17 15:48:17 server01 rpc.mountd[18437]: refused mount request from 1.2.3.77 for /export/public (/export/public): unmatched host

1.2.3.77 é o cliente.

Editar 3

server01 / # cat /etc/hosts.allow 
# /etc/hosts.allow: list of hosts that are allowed to access the system.
#                   See the manual pages hosts_access(5) and hosts_options(5).
#
# Example:    ALL: LOCAL @some_netgroup
#             ALL: .foobar.edu EXCEPT terminalserver.foobar.edu
#
# If you're going to protect the portmapper use the name "rpcbind" for the
# daemon name. See rpcbind(8) and rpc.mountd(8) for further information.
#

server01 / # cat /etc/hosts.deny 
# /etc/hosts.deny: list of hosts that are _not_ allowed to access the system.
#                  See the manual pages hosts_access(5) and hosts_options(5).
#
# Example:    ALL: some.host.name, .some.domain
#             ALL EXCEPT in.fingerd: other.host.name, .other.domain
#
# If you're going to protect the portmapper use the name "rpcbind" for the
# daemon name. See rpcbind(8) and rpc.mountd(8) for further information.
#
# The PARANOID wildcard matches any host whose name does not match its
# address.
#
# You may wish to enable this to ensure any programs that don't
# validate looked up hostnames still leave understandable logs. In past
# versions of Debian this has been the default.
# ALL: PARANOID

server01 / # 
    
por a coder 17.12.2015 / 20:35

1 resposta

2

Resolvido.

Editou / etc / exports e adicionou o IP específico da máquina cliente:

# added the following lines
/export       1.2.3.0/24(rw,fsid=0,insecure,no_subtree_check,async,no_root_squash)
/export/public 1.2.3.0/24(rw,nohide,insecure,no_subtree_check,async,no_root_squash)

Emitido exportfs -a e conseguiu montar a partir do cliente.

    
por a coder 17.12.2015 / 22:16