Start a Conversation

Unsolved

DA

1 Rookie

 • 

16 Posts

25

August 26th, 2025 19:00

Group permissions for NFS export mount not working

I've go an NFS export for whch group permissions does not appear to be working on NFS clients.  For example, users are unable to switch into directories for which they have either R-X or RWX permissions by virtue of group membership. None of these users are close to the 16-group membership limit.  Nevertheless, enabling map-lookup-uid on the export does not resolve the issue.  SELinux is enabled but in permissive mode. Rootsquash is enabled.

I could use some feedback.  Thanks!

Moderator

 • 

7.6K Posts

August 27th, 2025 14:12

Hello Dan Adams,

Which Isilon system do you have as you didn’t state it in your post?  What is the current OE that is on your Isilon system?  If group permissions for an NFS export mount on Isilon are not functioning as expected, consider the following factors:

  1. ACL Configuration: Ensure that the Access Control Lists (ACLs) are correctly set up. The group must have the necessary permissions (read, write, execute) on the directory being exported.
  2. Inherited Permissions: Check if the permissions are inherited correctly. If a user or group is not included in the ACL for newly created files, they may encounter permission issues despite having access to the directory.
  3. NFS Export Settings: Review the NFS export settings using the command isi nfs exports list to confirm that the correct clients and permissions are specified.
  4. Export Command Options: Ensure that the export command used to create the NFS share includes the appropriate options for group access. The command format does not follow traditional Unix-style options, so verify that the parameters align with Isilon's requirements.
  5. Testing Permissions: Use commands like ls -led <directory> to check the current permissions and ownership of the directory. This can help identify if the group has the expected access.

1 Rookie

 • 

16 Posts

August 27th, 2025 22:46

Working with a cluster iwith diffeent models deployed (I see references to an A300 and H700.) OneFS 9.7.1.2.  Export recently migrated from a Dell Unity.  No issues prior.

- ACL config appears correct. The group has the right permissions

- One of the symptoms is permisson denied when swtiching directories with no attempt to read/write/execute contents.  

- What export settings are specific to group permissions?  

- Same export mount commands used while using the export on the Dell Unity.  Does the PowerScale require different options?

- ls -led command confims the group permissions are correct.

 

Moderator

 • 

7.6K Posts

August 28th, 2025 18:40

Hello Dan Adams,

I would double check to make sure that your powerscale clients are setup using best practices listed in the kb at this link. https://www.dell.com/support/kbdoc/en-us/000063022/emc14001361-best-practices-for-nfs-client-settings

1 Rookie

 • 

16 Posts

October 3rd, 2025 16:30

@DELL-Sam L​ I don't see any best practices tha would impact the group permissions issue.  After consultation with a Dell support engineer, the consensus is the PowerScale has introduced Windows-style NTFS ACLs  into data migrated from the Dell Unity. The chmod -b command provides a fix but this is not vialbe within an export where affected files intermingle with unaffected files (apparently the issue does not impact files created after migrating from the Unity.)

No Events found!

Top