Re: GVFS with NFS: permission denied

[Julien Nicoulaud <julien nicoulaud gmail com>]

Hi Ondrej,

Thanks for the answer.

The exports already had the "insecure" option, but I realized I missed this in the server logs:

rpc.mountd[503]: refused mount request from 2a01:cb15:8281:8a00:7e7a:91ff:fee1:db3d for /srv/nfs (/srv/nfs): unmatched host

The hosts in my network have both an IPv4 and an IPv6. It looks like "mount" uses the IPv4 and GVFS the IPv6. So that was the issue here (because I put IPv4 masks in the exports).

Thanks anyway!

Julien

2016-11-21 8:41 GMT+01:00 Ondrej Holy <oholy redhat com>:

Hi Julien,

gvfsd-nfs is based on libnfs, see "ROOT vs NON-ROOT" chapter:
https://github.com/sahlberg/libnfs/blob/master/README

You have to use "insecure" option for the exports in order to allow unprivileged ports, or add capability to use privileged ports for gvfsd-nfs, e.g.:
sudo setcap 'cap_net_bind_service=+ep' /usr/libexec/gvfsd-nfs

I hope it helps to you

2016-11-20 18:24 GMT+01:00 Julien Nicoulaud <julien nicoulaud gmail com>:

Hi all,

I'm using Arch Linux with GNOME 3.22, and I'm trying to access a NFS share with Nautilus, I installed gvfs-nfs and I'm trying to access it with this URL:

nfs://storm/mnt/data/videos

But I get a "permission denied" error.

With gvfs-mount:

$ gvfs-mount nfs://storm/mnt/data/videos
Error mounting location: Permission refus?e?: cet h?te est peut-?tre interdit ou un port privil?gi? est n?cessaire

("this host might be forbidden or a privileged port is necessary)

Mounting with "mount" works fine:

sudo mount -t nfs -o rw storm:/mnt/data/videos /tmp/storm

The exports on my server are:

$ cat /etc/exports
/mnt/data/ 192.168.1.0/16(ro,fsid=root,no_subtree_check,insecure)
/mnt/data/music 192.168.1.0/16(ro,no_subtree_check,nohide,insecure)
/mnt/data/videos 192.168.1.0/16(ro,no_subtree_check,nohide,insecure)
/mnt/data/downloads 192.168.1.0/16(ro,no_subtree_check,nohide,insecure)

This page mentions some debug variables, but I'm not sure where to put it, I'm not even sure which daemon is the GVFS one...

Any idea how to investigate this ?

Best regards,
Julien

_______________________________________________
gvfs-list mailing list
gvfs-list gnome org
https://mail.gnome.org/mailman/listinfo/gvfs-list

--

Regards

Ondrej