[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference lassie::ucx

Title:DEC TCP/IP Services for OpenVMS
Notice:Note 2-SSB Kits, 3-FT Kits, 4-Patch Info, 7-QAR System
Moderator:ucxaxp.ucx.lkg.dec.com::TIBBERT
Created:Thu Nov 17 1994
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:5568
Total number of notes:21492

5530.0. "NFS client mapping question" by BSS::G_MCINTOSH (Touch Not the Cat, Bot the Glove) Tue May 27 1997 04:19

	Researching a customer problem.  Any thoughts?

	UCX4.1 is nfs client.   SunOS is nfs server.
	Customer has a group of people on VMS in the same group.

	When he mounts a filesystem from SunOS, he can't make the
	connection to allow this group of people access by altering
	the "group" permissions on SunOS.  If he changes the "other"
	permissions, then these folks can change, write, etc, the 
	mounted filesystem.

	I am unaware of a way that nfs knows these people are in 
	the right group.  

	Thanks for any help.

	Glenn
T.RTitleUserPersonal
Name		DateLines
5530.1UCXAXP::CORENZWITstuck in postcrypt queueTue May 27 1997 20:127
    Groups must match both as the group portion of the VMS UIC and as the
    UNIX GID.  That is, there must be a proxy mapping for the file owner
    that has the same GID as the proxy for the VMS client user, AND the 
    VMS user must have the same group portion of the UIC as the proxy
    mapping for the file owner.
    
    Julie
5530.2Well....BSS::G_MCINTOSHTouch Not the Cat, Bot the GloveWed May 28 1997 18:3726
    Still can't get this to fly.  Don't know if I'm properly implementing
    what the last entry said, but
    
    If I have 3 users; Mundy, Jones & Smith in proxy table as:
    		Mundy	OND	1180, 470	*
    		Jones	OND	1181, 470	*
    		Smith	OND	1182, 470	*
    
    and directory on SunOS Server is 
    		drwxrwxrwx   5 phil    lang    8192 Aug 25  1995 project
    
    and the group lang equates to 470 in /etc/groups file
    
    and if Mundy, Jones and Smith all have the same group portion of their
    uic in authorize [470,12] [470,13] and [470,14]
    
    then shouldn't altering the group portion of the permissions on
    directory project have the desired effect on Mundy, Jones and Smith?
    
    Thanks for any help.
    
    Glenn
5530.3UCXAXP::CORENZWITstuck in postcrypt queueWed May 28 1997 20:2813
    As I explained to Glenn offline, he needs the following in addition:
    
    1.  If lang is the name of the group, that must be equivalent to GID
        470.
    
    2.  There must be a proxy for whatever the UID equivalent of phil is,
    	and that proxy must map to a VMS user with a UIC of [470,whatever].
    
    The fact that he has chosen to use 470 as both the VMS group part of
    the UIC and as the UNIX GID is a coincidence of absolutely no interest
    to the software.
    
    Julie
5530.4BSS::G_MCINTOSHTouch Not the Cat, Bot the GloveThu May 29 1997 03:226
    
    	Thanks Julie, 
    
    	I'm still working this with the customer.