ah ha, yup that's the issue then. The setfacl sets an ACL in the remote filesystem, you just have to do that once from some system that has no_root_squash access to /home/ciao, assuming you're running the setfacl command as root (you could also run it as the owner of /home/ciao if that's a non-root user). See man getfacl and setfacl for details :)
On Wed, Nov 19, 2014 at 9:38 AM, Bruce W. Martin <[email protected]> wrote: > Does this need to be done on each machine barry will need access to > /home/ciao? > Yes, he is in 20 groups. > > Thanks, > Bruce > > On Nov 18, 2014, at 12:41 PM, Sabuj Pattanayek <[email protected]> wrote: > > ..or you can use acl's on /home/ciao if you can't get him down to below 16 > groups, and yes *it* supports posix acl's :) : > > setfacl -m u:barry:rwx /home/ciao > > On Tue, Nov 18, 2014 at 12:38 PM, Sabuj Pattanayek <[email protected]> > wrote: > >> >>> Barry can ssh into any of the machines (nis0, smb0, vcn0) but can not >>> access (read, ls, move around, etc.) /home/ciao and gets a permission >>> denied error. >>> >> >> Check the output of id barry on the systems and make sure he has the >> correct uid # and the correct group memberships. Assuming nfsv3, if he's in >> more than 16 groups on the systems then whatever group he needs to be in >> for access to /home/ciao needs to come within the first 16 or it's random >> and there's no telling if it'll work or not and you really need to try to >> get him down to 16 groups or less. >> >> >> > -- > -- > You received this message because you are subscribed to the Google Groups > "NLUG" group. > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/nlug-talk?hl=en > > --- > You received this message because you are subscribed to the Google Groups > "NLUG" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- -- You received this message because you are subscribed to the Google Groups "NLUG" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en --- You received this message because you are subscribed to the Google Groups "NLUG" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
