I don't seem to be able to NFS export a CDROM in 5.3. I put "/mnt/cdrom
-ro" in /etc/exports. It exports the mount point OK, but once I mount the
CD onto /mnt/cdrom a remote client cannot mount it, permission denied. If
I then "exportfs -a" it complains that /mnt/cdrom is a read only
filesystem and refuses to export it, even though the export is read only.

I'm a bit short of 5.3 machines I can reach but I mounted a disk
filesystem read only on another one and attempted to export that read only
and it failed exactly the same. So I don't think it's anything wrong with
the specific box.

This works fine in 5.2. A comparison, using disk filesystems:

5.2:

/root * c01am000 * root * > mount -o ro /ian
/root * c01am000 * root * > exportfs -i -o ro /ian
/root * c01am000 * root * >

and /ian is exported.

5.3:

/root * avocado * root * > mount -o ro /ian
/root * avocado * root * > exportfs -i -o ro /ian
exportfs: /ian: The file system has read permission only.
/root * avocado * root * >

and /ian is not exported.

The ability to export a CD is rather important, I deal with lots of remote
systems where I can't just stick the CD in the local drive. I can't
believe it's supposed to work like this.

I applied ML02 which came out last week or thereabouts but it made no
difference.

Am I doing something stupid?

Regards, Ian

Nope...I thought the same thing (although, sometimes...<G>). I believe
it has something to do with the additional/added security mechanisms
related to NFS4. I haven't had time to research/resolve it to my
satisfaction yet and have found it easiest to just use smit.

If you go into:
smit nfs
-> nfs
-> add a directory to exports list

I believe the "security methods" field may be part of the issue...I've
also discovered I've had to (in addition to the other "normal" options
related to the CD) specify hosts allowed root access...try exporting via
this smit screen (use the export "now" option), then press the F6 to
display the command...work you're way via the command line from there.

Not much, but may be a start (?).

Paul
===
Ian Northeast wrote:
> I don't seem to be able to NFS export a CDROM in 5.3. I put "/mnt/cdrom
> -ro" in /etc/exports. It exports the mount point OK, but once I mount the
> CD onto /mnt/cdrom a remote client cannot mount it, permission denied. If
> I then "exportfs -a" it complains that /mnt/cdrom is a read only
> filesystem and refuses to export it, even though the export is read only.
>
> I'm a bit short of 5.3 machines I can reach but I mounted a disk
> filesystem read only on another one and attempted to export that read only
> and it failed exactly the same. So I don't think it's anything wrong with
> the specific box.
>
> This works fine in 5.2. A comparison, using disk filesystems:
>
> 5.2:
>
> /root * c01am000 * root * > mount -o ro /ian
> /root * c01am000 * root * > exportfs -i -o ro /ian
> /root * c01am000 * root * >
>
> and /ian is exported.
>
> 5.3:
>
> /root * avocado * root * > mount -o ro /ian
> /root * avocado * root * > exportfs -i -o ro /ian
> exportfs: /ian: The file system has read permission only.
> /root * avocado * root * >
>
> and /ian is not exported.
>
> The ability to export a CD is rather important, I deal with lots of remote
> systems where I can't just stick the CD in the local drive. I can't
> believe it's supposed to work like this.
>
> I applied ML02 which came out last week or thereabouts but it made no
> difference.
>
> Am I doing something stupid?
>
> Regards, Ian

Ian,
Meant to include this suggestion in my last post - see if any of the
options of nfso -a might have an impact.

PS
===
Ian Northeast wrote:
> I don't seem to be able to NFS export a CDROM in 5.3. I put "/mnt/cdrom
> -ro" in /etc/exports. It exports the mount point OK, but once I mount the
> CD onto /mnt/cdrom a remote client cannot mount it, permission denied. If
> I then "exportfs -a" it complains that /mnt/cdrom is a read only
> filesystem and refuses to export it, even though the export is read only.
>
> I'm a bit short of 5.3 machines I can reach but I mounted a disk
> filesystem read only on another one and attempted to export that read only
> and it failed exactly the same. So I don't think it's anything wrong with
> the specific box.
>
> This works fine in 5.2. A comparison, using disk filesystems:
>
> 5.2:
>
> /root * c01am000 * root * > mount -o ro /ian
> /root * c01am000 * root * > exportfs -i -o ro /ian
> /root * c01am000 * root * >
>
> and /ian is exported.
>
> 5.3:
>
> /root * avocado * root * > mount -o ro /ian
> /root * avocado * root * > exportfs -i -o ro /ian
> exportfs: /ian: The file system has read permission only.
> /root * avocado * root * >
>
> and /ian is not exported.
>
> The ability to export a CD is rather important, I deal with lots of remote
> systems where I can't just stick the CD in the local drive. I can't
> believe it's supposed to work like this.
>
> I applied ML02 which came out last week or thereabouts but it made no
> difference.
>
> Am I doing something stupid?
>
> Regards, Ian

On Sat, 21 May 2005 11:50:03 +0000, Dohhhh wrote:

> Nope...I thought the same thing (although, sometimes...<G>). I believe it
> has something to do with the additional/added security mechanisms related
> to NFS4. I haven't had time to research/resolve it to my satisfaction yet
> and have found it easiest to just use smit.
>
> If you go into:
> smit nfs
> -> nfs
> -> add a directory to exports list
>
> I believe the "security methods" field may be part of the issue...I've
> also discovered I've had to (in addition to the other "normal" options
> related to the CD) specify hosts allowed root access...try exporting via
> this smit screen (use the export "now" option), then press the F6 to
> display the command...work you're way via the command line from there.
>
> Not much, but may be a start (?).

It is, yes, thanks, I should have thought to look at what smitty said.

It does indeed need security methods to be configured. I can now get to
the point where I can export a RO filesystem to the world but not with
root access, which is needed to enable reading files with 600 etc.
permissions.

But now I know where I should be looking, I should be OK. Thanks very much
for the pointer.

Regards, Ian