Subj : Re: NFS File Area Issue
To   : deon
From : MeaTLoTioN
Date : Thu Mar 25 2021 00:44:39

On 25 Mar 2021, deon said the following...
 
 de>   Re: Re: NFS File Area Issue
 de>   By: paulie420 to deon on Wed Mar 24 2021 09:25 am
 de> 
 de> Howdy,
 de> 
 de>  pa> mL has recently seen some of my knowledge with Linux; I know a lot, a
 de> then.. I know so little. Even I should have known this... I didn't give
 de> ANY access consideration to the NFS drive. So thats most likely where
 de> Mystic is failing.
 de>  pa> My BBS is on user 'pi'... and my NAS is on a user 'paulie420'. Lol, t
 de> /ROMs folder is listed 'paulie420 : users'.  And I suppose I'm gonna
 de> need a whole lesson on permissions - which I can do mostly on my own
 de> time, but...
 de> 
 de> So cross device NFS is a pain...
 de> 
 de> At the end of the day, file access talks UID/GID (numbers) - just like
 de> DNS names resolve to an IP address so 2 things can talk to each other.
 de> 
 de> On all my systems, my user is "deon", which is always the same UID (say
 de> 2000), and my "users" also has the same GID (say 1000). Then when I save
 de> a file as deon:users on any system - if that system exports a filesystem
 de> via NFS, any other system I can still access it (because deon:users =
 de> 2000:1000).
 de> 
 de> So if you are sharing stuff to your PI - and the files are owned 
 de> paulie420:users, and the Pi application is running as pi:users - while 
 de> "paulie420" and "pi" can have different UIDs - your users group should
 de> have the
 de> 
 de> same GID. Then if you files and dirs have g=rwx (then your "pi:users"
 de> user can read your files on the NAS that are owned by paulie420:users).
 de> 
 de> (Its perfectly legal that the UID for "pi" and "paulie420" be the same
 de> number, then u=rwx would apply.)
 de> 
 de> IE: It doesnt matter what the text is for a user or a group (that's for
 de> us humans), its the IDs that they map to that is important for access
 de> control.
 de> 
 de> Now, if you doing stuff as "root", then there is a different issue to
 de> address -
 de> 
 de> since NFS can map root to "nobody" if nfs_root_squash is used (its a
 de> protective
 de> 
 de> thing, but it can trip you up every now and again).
 de> 

What he said! =)
I was gonna say in a round about way almost exactly this. UID's and GID's

You could "cheat" the system a little, if the NFS mount is purely gonna be used 









































































































































































































































































































































































































































































































































































































































































































































































































































































































by you and you alone, then just chmod 777 the lot, however I would do what Deon 









































































































































































































































































































































































































































































































































































































































































































































































































































































































said. Matching UID's and GID's is the way to go.

---
|14Best regards,
|11Ch|03rist|11ia|15n |11a|03ka |11Me|03aTLoT|11io|15N

|07ÄÄ |08[|10eml|08] |15ml@erb.pw |07ÄÄ |08[|10web|08] |15www.erb.pw |07ÄÄÄ¿
|07ÄÄ |08[|09fsx|08]  |1521:1/158 |07ÄÄ |08[|11tqw|08] |151337:1/101 |07ÂÄÄÙ
|07ÄÄ |08[|12rtn|08] |1580:774/81 |07ÄÂ |08[|14fdn|08] |152:250/5 |07ÄÄÄÙ
|07ÄÄ |08[|10ark|08]  |1510:104/2 |07ÄÙ

--- Mystic BBS v1.12 A47 2020/12/04 (Linux/64)
 * Origin: thE qUAntUm wOrmhOlE, rAmsgAtE, uK. bbs.erb.pw (1337:1/101)

.