Map nfs clients to user - Teh Forum

<body> <div id="header"> <span class="left"> <span class="back"><a href="lthread_list.php?webtag=DEFAULT"><span class="image mobile_back" title="Back"></span></a></span> <span class="image mobile_logo" title="Beehive Forum Logo"></span> </span> <ul> <li> <a class="reply_all" href="lpost.php?webtag=DEFAULT&reply_to=41773.0&return_msg=41773.1"> <span class="image mobile_reply_all"></span><span class="text">Reply to All</span> </a> </li> <li> <a class="navigation" href="#"> <span class="image mobile_navigation"></span><span class="text">Show messages</span> </a> </li> <li> <a class="main" href="#"><span class="image mobile_menu" title="Menu"></span> </a> </li> </ul> </div> <div class="menu main"> <ul> <li><a href="lthread_list.php?webtag=DEFAULT">Messages</a></li> <li><a href="lpm.php?webtag=DEFAULT">Inbox</a></li> <li><a href="lsearch.php?webtag=DEFAULT">Search</a></li> <li><a href="llogon.php?webtag=DEFAULT">Login</a></li> </ul> </div> <div class="menu navigation"><a href="lmessages.php?webtag=DEFAULT&msg=41773.1">1–10</a><a href="lmessages.php?webtag=DEFAULT&msg=41773.11">11–20</a></div> <div id="page_content"> <h3 class="thread_title"><a href="index.php?webtag=DEFAULT&amp;msg=41773.1">Map nfs clients to user</a> </h3> <div id="messages" data-navigation="41773_1_20_10"> <a name="a41773_1"></a><div class="message" id="message_41773_1"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time">30 Jun 2016 18:41</span> <div class="clearer"></div> </div><div class="message_to">To: ALL<span class="message_count">1 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.1">41773.1</a></div> <div class="message_body"> /etc/idmapd.conf<br /><br /> WTF does it do?<br /> <div class="quotetext"><strong>Quote:</strong> </div> <div class="quote">Nobody-User = nobody Nobody-Group = nogroup</div> I've exported the webroot of a server, and lan clients (folks who need access) can open without login. Fine.<br /><br /> *But* I want to assign specific user+group to files they write. <span class="emoticon e_pray" title="(pray)"><span class="e__">(pray)</span></span><br /><br /> Tried changing ^^^ nobody/nogroup to myuser/mygroup, but files are still nobody/nogroup<br /><br /> Is it possible?<div class="edit_text">EDITED: 30 Jun 2016 18:48 by DSMITHHFX</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.1&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.1"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41773_2"></a><div class="message" id="message_41773_2"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time"> 4 Jul 2016 13:49</span> <div class="clearer"></div> </div><div class="message_to">To: ALL<span class="message_count">2 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.2">41773.2</a></div> <div class="message_body"> I managed to get latest netatalk to compile and install on my amd64 Ubuntu 14.04 vm, so I don't need the nfs user stuff resolved (remains to be seen if it will install to ppc metal version).<br /><br /> Now I gotta new question, which (I hope) may be a generic unix -y question rather than specific to afp:<br /><br /> Is there a way to force files written to a particular share to have a different group (which the user is a member of), e.g. 'joe/www-data', rather than the user's default group (e.g. 'joe/joe') ?<br /><br /> edit: chmod 2775 <span class="emoticon e_taboo" title="(taboo)"><span class="e__">(taboo)</span></span> <div class="edit_text">EDITED: 4 Jul 2016 14:16 by DSMITHHFX</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.2&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.2"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41773_3"></a><div class="message" id="message_41773_3"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time"> 4 Jul 2016 14:24</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 4 Jul 2016 14:41"></span></span> <span class="message_count">3 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.3">41773.3</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41773.1#a41773_2" target="_self">41773.2</a></div> <div class="message_body"> If you `chmod g+s` a directory then all newly created files in that directory will inherit the directory's group rather than the primary group of the user who creates the file.<br /><br /> Couple of caveats: This won't change the *owner* ID of the new file, just the group ID.<br /><br /> Also this won't apply to files that are moved or copied, only newly created ones. Which I suspect will make it useless?<br /><br /> I don't believe there's a way to change ownership/group of files that are copied into a directory on the fly - for that you'd have to use something on a cron job/systemd timer or something like that.<br /><br /> It *sounds* like you're tying to make a website's files available for editing or something like that, right? But want to keep the web server reasonably secure, not giving it access to a load of shit outside of web root?<br /><br /> I *believe* you could do something suitable with ACLs but you'd need a recent version of NFS (v4) for that to work and you're on an old-ass Ubuntu. (Also, it sounds fucking complicated).<br /><br /> Personally I'd use a third, unprivileged user with the primary group www-data to edit the files but that might not be practicable in your situation.<br /><br /> Failing that, chmod g+s (look up setgid if you want more info) combined with a job on a timer to take care of any copied/moved files might be the simplest.<br /><br /> *Really* though, it sounds like you're trying to use NFS for what Git is good at. What I'd *really* want to do is set up a git repo on the same machine as the web server to which changes to the website are pushed. Then set up some git hooks on that repo to, when stuff is changed, copy or clone/pull everything into web root and set the correct permissions. This would be neater and less prone to fucking up.<br /><br /><br /> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.3&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.3"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41773_4"></a><div class="message" id="message_41773_4"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time"> 4 Jul 2016 14:28</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 4 Jul 2016 14:41"></span></span> <span class="message_count">4 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.4">41773.4</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41773.1#a41773_2" target="_self">41773.2</a></div> <div class="message_body"> >edit: chmod 2775 <br /><br /> Yeah, that's the same as chmod g+s. Same caveat - won't work with copied/moved files.</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.4&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.4"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41773_5"></a><div class="message" id="message_41773_5"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time"> 4 Jul 2016 14:49</span> <div class="clearer"></div> </div><div class="message_to">To: Drew (X3N0PH0N) <span><span class="image post_read" title="Read: 4 Jul 2016 14:50"></span></span> <span class="message_count">5 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.5">41773.5</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41773.1#a41773_4" target="_self">41773.4</a></div> <div class="message_body"> Just tried it on the afp share, it works for copied files too. Apparently it's an apple [/BSD] default. Kind of gave up on the nfs thing, I never had it (force uid/gid) working on the current dev server anyway. Not gonna install and config kerberos shit just for that <span class="emoticon e_sad" title=":-("><span class="e__">:-(</span></span> <div class="edit_text">EDITED: 4 Jul 2016 14:50 by DSMITHHFX</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.5&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.5"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41773_6"></a><div class="message" id="message_41773_6"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time"> 4 Jul 2016 14:52</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 4 Jul 2016 15:07"></span></span> <span class="message_count">6 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.6">41773.6</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41773.1#a41773_5" target="_self">41773.5</a></div> <div class="message_body"> Yeah, NFS can be more of a pain in the arse than it really should be for something so simple. I had NFS shares set up for a while but it would just randomly flake out. I went back to SSHFS which has always just worked flawlessly for me.<br /><br /> Glad you got it sorted though!</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.6&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.6"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41773_7"></a><div class="message" id="message_41773_7"> <div class="message_header"> <div class="message_from"> From: ANT_THOMAS<span class="message_time"> 4 Jul 2016 15:03</span> <div class="clearer"></div> </div><div class="message_to">To: Drew (X3N0PH0N) <span><span class="image post_read" title="Read: 4 Jul 2016 16:09"></span></span> <span class="message_count">7 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.7">41773.7</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41773.1#a41773_6" target="_self">41773.6</a></div> <div class="message_body"> No idea whether speed is a concern, but is SSHFS much slower than SMB or NFS? Due to encryption/decryption, though that might only be an issue with a crap CPU.</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.7&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.7"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41773_8"></a><div class="message" id="message_41773_8"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time"> 4 Jul 2016 15:10</span> <div class="clearer"></div> </div><div class="message_to">To: ANT_THOMAS <span><span class="image post_read" title="Read: 4 Jul 2016 15:11"></span></span> <span class="message_count">8 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.8">41773.8</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41773.1#a41773_7" target="_self">41773.7</a></div> <div class="message_body"> Never tried SSHFS (actually, never heard of it), but afp is a lot slower than nfs. Fast enough for generic daily r-w usage, but for e.g. backups I use nfs.<div class="edit_text">EDITED: 4 Jul 2016 15:10 by DSMITHHFX</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.8&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.8"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41773_9"></a><div class="message" id="message_41773_9"> <div class="message_header"> <div class="message_from"> From: ANT_THOMAS<span class="message_time"> 4 Jul 2016 15:14</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 4 Jul 2016 15:24"></span></span> <span class="message_count">9 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.9">41773.9</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41773.1#a41773_8" target="_self">41773.8</a></div> <div class="message_body"> Literally SSH Filesystem. I guess pretty much the same as scp but fully mounted rather than individual copy commands.<br /><br /> I found that the encryption slowed things down with scp and big files, but that was on a system with a weak CPU. Changing the encryption type/strength improved speeds significantly. This was also over the internet - dedicated server to home, but I could max the connection over HTTP.<div class="edit_text">EDITED: 4 Jul 2016 15:18 by ANT_THOMAS</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.9&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.9"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41773_10"></a><div class="message" id="message_41773_10"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time"> 4 Jul 2016 15:28</span> <div class="clearer"></div> </div><div class="message_to">To: ANT_THOMAS <span><span class="image post_read" title="Read: 4 Jul 2016 15:29"></span></span> <span class="message_count">10 of 20</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41773.10">41773.10</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41773.1#a41773_9" target="_self">41773.9</a></div> <div class="message_body"> <div class="quotetext"><strong>Quote:</strong> </div> <div class="quote">Literally SSH Filesystem</div> <p>Ah. Didn't recognize it, I was thinking SS + HFS (for macs). Pretty sure I do use it, to mount the webroot from home (since it doesn't have ftp). Set it up a couple of years ago and forgot/don't think about the network protocol used). Yeah, it is really slow. Good to know you can change that though I doubt I'll ever need to.</p> <div class="edit_text">EDITED: 4 Jul 2016 15:28 by DSMITHHFX</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41773.10&return_msg=41773.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41773.10"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div></div> <div class="message_page_footer"> <ul> <li class="right_col"><form accept-charset="utf-8" method="get" action="lmessages.php" target="_self"><input type="hidden" name="webtag" id="webtag" class="bhinputtext" value="DEFAULT" dir="ltr" /><input type="hidden" name="msg" id="msg" class="bhinputtext" value="41773.11" dir="ltr" /><input type="submit" name="submit" id="keep_reading" value="Keep reading…" class="button" /></form></li> </ul> </div> </div> </body>