UNSOLVED

Dan Adams

updated

1 year ago

DA

Dan Adams

1 Rookie

•

16 Posts

•

2 Points

0

817

June 26th, 2025 22:22

How to Disable RootSquash on PowerScale NFS Export

I am unable to disable rootsquash on a PowerScale NFS export. 

What I've Done:

  1. Disabled root mapping (aka rootsquash) via:
    • PowerScale WebUI → Export Settings → "Do not map root users".
  2. Confirmed via CLI:
    • isi nfs exports view <export_id> --zone <zone> shows map-root-enabled: false.
  3. Validated client IPs:
    • Clients are listed in Clients, Always Read/Write Clients, and Root Clients.
  4. Expected Behavior:
    • Files/directories in client mount should be owned by root (UID 0), not nobody.

Unfortunately my expectations have not been met:(

  • DELL-Sam L

    Community Manager

    •

    8147 Posts

    •

    34706 Points

    0

    0

    Posted June 27th, 2025 13:52

    Hello Dan Adams,

    Have you tried the following steps to disable root squash?

    Steps to Disable Root Squash:

    1.       Access the export configuration for the desired NFS export.

    2.       Modify the export settings to include no_root_squash.

    3.       Save the changes to apply the new configuration.

  • Dan Adams

    1 Rookie

    •

    16 Posts

    •

    2 Points

    0

    0

    Posted June 27th, 2025 15:31

    @DELL-Sam L​ I believe I have but please confirm these are correct:

    What I've Done:

    1. Disabled root mapping (aka rootsquash) via:
      • PowerScale WebUI → Export Settings → "Do not map root users".
    2. Confirmed via CLI:
      • isi nfs exports view <export_id> --zone <zone> shows map-root-enabled: false.


  • DELL-Josh Cr

    Community Manager

    •

    9790 Posts

    •

    45217 Points

    0

    0

    Posted June 27th, 2025 15:42

    have you tried restarting the nfs server and remounting the filesystem on the client?

  • Dan Adams

    1 Rookie

    •

    16 Posts

    •

    2 Points

    0

    0

    Posted June 27th, 2025 16:01

    @DELL-Josh Cr​ Restarting a multi-node PowerScale cluster (or the NFS service) in a production enterprise environment is not really an option lol! I remounted the export on the client to no avail.

    (edited)

  • DELL-Josh Cr

    Community Manager

    •

    9790 Posts

    •

    45217 Points

    0

    0

    Posted June 27th, 2025 16:17

    What is the output of isi nfs settings global view?

     

     

    Ensure that the NFSv4 domain on your Linux or Unix client exactly matches the domain on the Isilon cluster.

     

    This is because NFSv4 uses principal strings for authentication, which follow a specific case-sensitive format using a user or group part and a domain part. If the domain strings do not match, OneFS sets the user and group ownership to "nobody" and "nogroup". To correct this, update the domain settings on either the client or the cluster to match the other.

  • Dan Adams

    1 Rookie

    •

    16 Posts

    •

    2 Points

    0

    0

    Posted July 2nd, 2025 14:57

    @DELL-Josh Cr​ 

    The output is

    NFS Service Enabled: Yes
          NFSv3 Enabled: Yes
            NFSv3 RDMA Enabled: No
          NFSv4 Enabled: Yes
                  v4.0 Enabled: Yes
                  v4.1 Enabled: Yes
                  v4.2 Enabled: Yes
         Rquota Enabled: Yes

    The alien and server domains match.

  • DELL-Josh Cr

    Community Manager

    •

    9790 Posts

    •

    45217 Points

    0

    0

    Posted July 2nd, 2025 15:47

    What version of onefs are you using?

  • Dan Adams

    1 Rookie

    •

    16 Posts

    •

    2 Points

    0

    0

    Posted July 2nd, 2025 18:28

    @DELL-Josh Cr​ 

    version 9.7.1.2

  • DELL-Josh Cr

    Community Manager

    •

    9790 Posts

    •

    45217 Points

    0

    0

    Posted July 2nd, 2025 18:35

    Try disabling 4.1 and 4.2 

    isi nfs settings global modify --nfsv41-enabled=false --nfsv42-enabled=false
  • Dan Adams

    1 Rookie

    •

    16 Posts

    •

    2 Points

    0

    0

    Posted July 2nd, 2025 19:34

    What's the impact of this change on the NFS service in general. especially NFS clients with mounts of other exports on the PowerScale?