|
Re: NFS home directories under OSX
|
Posted by:
Sven Nielsen
Date:
03-09-2010,
18:05:PM
|
This might not be it, but is the issue with root squashing on the NFS server? If ssh and sudo do anything as root, and 'no_root_squash' isn't enabled, their permissions will get squashed to 'nobody's permissions, which means things like .ssh dirs and anything without 'everybody' permissions applied won't be accessible.
Not sure how the export occurs on the server side, but instead of just IP_RANGE(rw) it should be something like IP_RANGE(rw,no_root_squash) . I think there might be a checkbox in OS X's Server Admin when you set up the export, but it's been a while, so I don't remember.
Again, not sure if this is it, but if the issue isn't something bizarre about the way homedirs are handled on OS X, this might be it.
-Sven On Mar 9, 2010, at 2:46 AM, Hugh Macdonald wrote: Todd - Thanks for your help - I'll keep working at this one then...
J.J. - Dir Util allows me to specify the mount point - I'll have a look at doing it using fstab instead... Personally, I still think that the NFS side of this is working just fine - it's OSX trying to do something else on top of this that's causing the problems here. And I'm still on 10.5.x (server and workstations) here.
Mat - The users themselves shouldn't be doing this - it's more tied up in the pipeline and render farm side of things.
There are two things that I need to be able to do that I can't at the moment...
The 'render' user (that all render machines are running as) needs to be able to sudo (without a password) the command 'runFarmCommand.py' as any user. This works for now, but usually chucks up warnings about not being able to find the user's home directory.
Users need to be able to SSH between machines without needing a password (for Alfred). At the moment, the user on the remote machine can't access ~/.ssh/, so the authentication can't happen (this works just fine under Linux)
Any more thoughts most welcome... I was hoping that some of you might have come across the same issues if you're working with a combined Linux/OSX setup (although if your server side is Linux, which is probably most likely, you may not have these problems)
Thanks again! Hugh Macdonald nvizible â VISUAL EFFECTS +44(0) 207 659 2369 +44(0) 7773 764 708 www.nvizible.comOn 8 March 2010 21:21, matxdotca <matxdotca@gmail.com> wrote:
On 2010-03-08, at 10:44 AM, Hugh Macdonald wrote:
> The gist of it is that my user's home directories are shared using NFS (OSX Server -> OSX Workstations), and it's causing permissions problems when switching to any user other than the one that's logged on through the GUI.
Can I ask to what purpose other users are trying to ssh in to a machine? Is it for your render farm or something else?
:)
Mat X
E: matxdotca@gmail.com
T: 778-837-1036
? Apple Certified Xsan 2 Admininistrator
? Apple Certified Media Administrator
? Apple Certified Pro - Final Cut Server Level One
? Apple Certified Technical Coordinator (10.6)
? Apple Certified Support Professional (10.6)
StudioSysAdmins-Discuss mailing list
StudioSysAdmins-Discuss@mailman.studiosysadmins.com
http://mailman.studiosysadmins.com/mailman/listinfo/studiosysadmins-discuss
|
