Tom, I was trying to find the instructions I had used a while ago to try using the Windows NFS client, but from what I am finding in searching today is that you may need to set up some additional registry keys in: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default Add New DWORD (32-bit) Value for AnonymousUid with the uid you want the client to use And New DWORD (32-bit) Value for AnonymousGid with the gid you want the client to use Otherwise Windows uses -2,-2 This taken from this web page: https://graspingtech.com/mount-nfs-share-windows-10/ I think the reason I didn't need to do that is I did the Windows stuff in an exported directory that had 0777 permissions. If you ARE using AD, you can set the uid and gid in AD. Frank

-----Original Message----- From: TomK [mailto:tomkcpr@mdevsys.com] Sent: Wednesday, March 4, 2020 3:43 PM To: support@lists.nfs-ganesha.org; Frank Filz <ffilzlnx@mindspring.com>; Kaleb S. KEITHLEY <kkeithle@redhat.com> Subject: Mounting NFS Ganesha shares on Win 10 and Mac OS

Hey All,

Trying to find the best way to mount NFS Ganesha presented NFS paths on both Win 10 and Mac OS. I'm partially successful.

Win 10:

This laptop is not on AD. But I'm trying to mount the NFS share and access it via the AD user tom@mds.xyz. I can mount it this way:

C:\Users\tom>mount -o nolock \\192.168.0.125\n M: M: is now successfully connected to \\192.168.0.125\n

The command completed successfully.

C:\Users\tom>

However when I try to access /n/mds.xyz/tom, home folder of an AD user I of course get Permission denied. How do I specify an AD user from a client not on AD?

Mac OS X (~2013) macOS High Sierra, 10.13.6:

When trying to mount using:

mount -t nfs -o resvport,rw 192.168.0.125:/n nfs

I get a:

mount_nfs can't mount /n from 192.168.0.125 onto /private/tmp/nfs: Permission denied

I tested this to see where it's coming from and see that's it's sever generated. I turned off the server nfs ganesha and got a different error. Checking the logs on nfs-ganesha, I can see the client did reach the nfs-ganesha sever correcty. Just got permission denied.

[ Ideal Situation ]

How do I mount the NFS share ideally using my AD user from this Win 10 laptop and Mac OS X laptop, either of which is not on AD? I've a couple dozen machines and all work correcty with the home folders on this NFS share. NFS home folders between these kerberized machines wok well using the same NFS Ganesha.

-- Thx, TK.

[root@nfs03 ganesha]# cat /etc/ganesha/ganesha.conf ################################################### # # EXPORT # # To function, all that is required is an EXPORT # # Define the absolute minimal export # ###################################################

# logging directives--be careful LOG { # Default_Log_Level is unknown token?? # Default_Log_Level = NIV_FULL_DEBUG; Components { # ALL = FULL_DEBUG; MEMLEAKS = FATAL; FSAL = DEBUG; NFSPROTO = FATAL; NFS_V4 = FULL_DEBUG; EXPORT = DEBUG; FILEHANDLE = FATAL; DISPATCH = DEBUG; CACHE_INODE = FULL_DEBUG; CACHE_INODE_LRU = FATAL; HASHTABLE = FATAL; HASHTABLE_CACHE = FATAL; DUPREQ = FATAL; INIT = DEBUG; MAIN = FATAL; IDMAPPER = FULL_DEBUG; NFS_READDIR = FULL_DEBUG; NFS_V4_LOCK = FULL_DEBUG; CONFIG = FULL_DEBUG; CLIENTID = FULL_DEBUG; SESSIONS = FATAL; PNFS = FATAL; RW_LOCK = FATAL; NLM = FATAL; RPC = FULL_DEBUG; NFS_CB = FATAL; THREAD = FATAL; NFS_V4_ACL = FULL_DEBUG; STATE = FULL_DEBUG; # 9P = FATAL; # 9P_DISPATCH = FATAL; FSAL_UP = FATAL; DBUS = FATAL; }

Facility { name = FILE; destination = "/var/log/ganesha/ganesha-rgw.log"; enable = active; } }

NFSv4 { Lease_Lifetime = 20 ; IdmapConf = "/etc/idmapd.conf" ; DomainName = "nix.mds.xyz" ; }

NFS_KRB5 { PrincipalName = "nfs/nfs03.nix.mds.xyz@NIX.MDS.XYZ" ; KeytabPath = /etc/krb5.keytab ; Active_krb5 = YES ; }

NFS_Core_Param { Bind_addr = 192.168.0.125; NFS_Port = 2049; MNT_Port = 20048; NLM_Port = 38468; Rquota_Port = 4501; }

%include "/etc/ganesha/export.conf" # %include "/etc/ganesha/export-home.conf" [root@nfs03 ganesha]# cat /etc/ganesha/export.conf EXPORT { Export_Id = 1 ; # Export ID unique to each export Path = "/n"; # Path of the volume to be exported. Eg: "/test_volume"

FSAL { name = GLUSTER; hostname = "nfs03.nix.mds.xyz"; # IP of one of the nodes in the trusted pool volume = "gv01"; # Volume name. Eg: "test_volume" }

Access_type = RW; # Access permissions Squash = No_root_squash; # To enable/disable root squashing Disable_ACL = FALSE; # To enable/disable ACL Pseudo = "/n"; # NFSv4 pseudo path for this export. Eg: "/test_volume_pseudo" Protocols = "3", "4"; # "3", "4" NFS protocols supported Transports = "UDP", "TCP" ; # "UDP", "TCP" Transport protocols supported SecType = "sys","krb5","krb5i","krb5p"; # "sys","krb5","krb5i","krb5p"; # Security flavors supported } [root@nfs03 ganesha]#

Attached logs of a Mac OS X session attempt to mount the NFS share. (above)