@olivierlambert said in XCP-ng - mount.nfs: access denied by server while mounting:
Can you show the incorrect and the correct config used to make it even more clear?
openSUSE 15.4 NFS Setup:
Permission for /run/media/XCP-ng/WebServer/Production (Note: this is a mounted internal HD)
drwxrwxr-x 2 root nobody 4096 Jul 22 21:38 Production
Folder settings in /etc/export
/run/media/XCP-ng/WebServer/Production 10.60.70.0/24(rw,root_squash,sync,no_subtree_check) 10.70.70.0/24(rw,root_squash,sync,no_subtree_check)
To make sure the proper NFS RPC-based services are enabled for rpcbind, use the following
command: sudo rpcinfo -p
program vers proto port service
100000 4 tcp 111 portmapper
100000 3 tcp 111 portmapper
100000 2 tcp 111 portmapper
100000 4 udp 111 portmapper
100000 3 udp 111 portmapper
100000 2 udp 111 portmapper
100024 1 udp 55952 status
100024 1 tcp 43101 status
100005 1 udp 20048 mountd
100005 1 tcp 20048 mountd
100005 2 udp 20048 mountd
100005 2 tcp 20048 mountd
100005 3 udp 20048 mountd
100005 3 tcp 20048 mountd
100003 3 tcp 2049 nfs
100227 3 tcp 2049 nfs_acl
100003 3 udp 2049 nfs
100227 3 udp 2049 nfs_acl
100021 1 udp 57533 nlockmgr
100021 3 udp 57533 nlockmgr
100021 4 udp 57533 nlockmgr
100021 1 tcp 39073 nlockmgr
100021 3 tcp 39073 nlockmgr
100021 4 tcp 39073 nlockmgr
If one of the NFS services does not start up correctly, rpcbind will be unable to map RPC requests from clients for that service to the correct port.
To allow clients to access NFS shares behind a firewall, configure the firewall by running the following commands on the NFS server:
firewall-cmd --permanent --add-service mountd
firewall-cmd --permanent --add-service rpc-bind
firewall-cmd --permanent --add-service nfs
firewall-cmd --permanent --add-port=<mountd-port>/tcp
firewall-cmd --permanent --add-port=<mountd-port>/udp
firewall-cmd --reload
Note: I used firewall-config to do the port settings.
XCP-ng / Remote Settings:
New file system remote
Type
- NFS
- Backup Production Wev Servers
- ..
- 10.60.70.15
- leave port empty
- /run/media/XCP-ng/WebServer/Production
- ..
Note: Make sure you can do this on both systems
[19:48 xcp-pro ~]# showmount --exports 10.60.70.15
Export list for 10.60.70.15:
..
...
/run/media/XCP-ng/WebServer/Production 10.70.70.0/24,10.60.70.0/24
...
..
.
@olivierlambert said in XCP-ng - mount.nfs: access denied by server while mounting:
Thanks for the feedback!
For sure, anytime to help make XCP-ng the best! 