Re: NFS-Export problems

[Kevin Colby <kevin marcal com>]

Andreas Welbers wrote:
> I am using Redhat5.0 with the last patches. If I try to export some
> filesystems nothing happens!
> 
> My /etc/exports looks like following:
> /export *(ro)
> 
> I restart nfsd/mountd with /usr/rc.d/init.d/nfs restart.
> 
> But exportfs shows no filesystem to export and to mount. What the hell
> happens. I can't see the error!!
>
> I looked in /var/log/messages, but there is an error message that
> shouldn't be there:
> Apr 30 18:45 .... haendel mountd[557]: Unauthorized access by NFS
> client 137.226...
> Apr 30 18:45 .... haendel mountd[557]: Blocked attempt of 137.226.. to
> mount /export.

Well, my guess that that error message _should_ be there,
and that it describes the problem precisely.
The mounting machine is not allowed to mount that directory.
I could be wrong, but I base this on your /etc/exports
and what the man page says.

To quote the man page on /etc/exports ('man exports'):
-------------------------------------------------------------------
EXPORTS(5)                                             EXPORTS(5)

NAME
       exports - NFS file systems being exported

SYNOPSIS
       /etc/exports

DESCRIPTION
       The  file  /etc/exports  serves as the access control list
       for file systems which may be exported to NFS clients.  It
       it  used  by  both the NFS mount daemon, mountd(8) and the
       NFS file server daemon nfsd(8).

[...]

       wildcards
              Machine names may contain the wildcard characters *
              and  ?.   This can be used to make the exports file
              more compact; for  instance,  *.cs.foo.edu  matches
              all  hosts in the domain cs.foo.edu. However, these
              wildcard characters do not  match  the  dots  in  a
              domain  name, so the above pattern does not include
              hosts such as a.b.cs.foo.edu.

-------------------------------------------------------------------

It would seem to me that...

/export *(ro)

...will not allow any machines access.  Try:

/export *.mydomain.net(ro)

(of course, replacing "mydomain.net" with your actual domain.)

	- Kevin Colby
	  kevin marcal com