When mounting a file system using NFSv4, the file ownership is displayed as nobody.

Asked by AdrianW

All,

I'm running Ubuntu 10.04 latest updates with the following extra packages installed:
krb5-user, libpam-krb5, nfs-common, nfs-kernel-server, nfs4-acl-tools, Winbind and Samba packages

I've successfully added my Ubuntu system to our Windows 2003 Active Directory which also acts as our Kerberos Distribution Centre and LDAP directory.

I can also obtain a Kerberos ticket for my user account from the AD KDC.

From the Ubuntu client, I'm mounting to a remote file system exported only using NFS v4.
(sudo mount -t nfs4 -o sec=krb5 nfsv4server:/nfsv4export /mnt)

The remote NFS v4 file system has permissions assigned to its files/folders using user and group objects from our Active Directory.

Permissions are enforced correctly over the NFS v4 mount when mounting to it from Ubuntu.

The domain parameter is set to be the same in the /etc/idmapd.conf file on both the NFSv4 server and the Ubuntu client.

When I do directory listing of the NFSv4 mount from Ubuntu, the file ownership is displayed as nobody, rather than showing me the actual usernames from our Active Directory that own the data.

The syslog shows the following error : nss_getpwnam: name <email address hidden>' not found in domain 'domain.leeds.ac.uk''.

The username (and the user principal it should point to) shown in the error seems to be correct, so I'm puzzed why it cannot get a match from our LDAP Active Directory.

Any advice appreciated!

Many thanks,
Adrian.
<email address hidden>

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu samba Edit question
Assignee:
No assignee Edit question
Solved by:
AdrianW
Solved:
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said :
#1

you coud try adding an extra option:

uid=1000,guid=1000

Which may make it map to a user (not sure, never used kerberos with Linux). But may work.

Incidentally I am from Leeds too :D

Revision history for this message
AdrianW (adrianwheway) said :
#2

Thanks for the advice!

I found that applying the advice is this article resolved the problem:
https://help.ubuntu.com/community/ActiveDirectoryHowto

Thanks,
Adrian.