[K12OSN] authentication and home directory from OS X server

[Craig White]

On Thu, 2007-12-13 at 14:06 -0800, Hung Phan wrote:
> When mount the NFS share manually, we receive "mount:
> OS_X_server_IP:/Volumes/Freshman failed, reason given by server:
> Permission denied" error.
> 
> 
> In /etc/exports, we add
> /Volumes/Freshman
> client_IP/255.255.255.0(rw,async,insecure,no_root_squash)
> 
> 
> In /etc/fstab, we add
> OS_X_server_IP:/Volumes/Freshman /mnt/od nfs
> rsize=8192,wsize=8192,timeo=14,intr 0 0
> 
> 
> When issue tail -l /var/log/messages, we see many of these errors:
> Dec 13 13:48:18 kernel: audit(1197582498.000:550): avc:  denied
>  { search } for  pid=2698 comm="irqbalance" name="net" dev=proc
> ino=4026531864 scontext=system_u:system_r:irqbalance_t:s0
> tcontext=system_u:object_r:proc_net_t:s0 tclass=dir
----
sure looks like an selinux block...are you allowing nfs in selinux?

system-config-security

always check dmesg and/or /var/log/messages and/or /var/log/audit.log
for selinux messages...in this case, it's blocking you out but I'm not
sure that irqbalance is nfs...I wouldn't think so.

forget fstab for a moment...comment it out and simply do things from
command line

mount -t nfs OS_X_server_IP:/Volumes/Freshman /mnt/od nfs \
rsize=8192,wsize=8192,timeo=14,intr

I'm not certain that rsize=8192,wsize=8192,timeo=14,intr are actually
needed.

Does the Mac NFS server use tcp or udp for NFS? It may be using tcp...in
which case, you have to add that as an option.

Until you can mount/unmount from command line, stop fooling with fstab
and ldap because you won't get anywhere.

Craig