Subj : Re: NFS File Area Issue
To   : paulie420
From : deon
Date : Thu Mar 25 2021 09:40:58

  Re: Re: NFS File Area Issue
  By: paulie420 to deon on Wed Mar 24 2021 09:25 am

Howdy,

 pa> mL has recently seen some of my knowledge with Linux; I know a lot, and 
then.. I know so little. Even I should have known this... I didn't give ANY 
access consideration to the NFS drive. So thats most likely where Mystic is 
failing.
 pa> My BBS is on user 'pi'... and my NAS is on a user 'paulie420'. Lol, the 
/ROMs folder is listed 'paulie420 : users'.  And I suppose I'm gonna need a 
whole lesson on permissions - which I can do mostly on my own time, but... 

So cross device NFS is a pain...

At the end of the day, file access talks UID/GID (numbers) - just like DNS 
names resolve to an IP address so 2 things can talk to each other.

On all my systems, my user is "deon", which is always the same UID (say 2000), 
and my "users" also has the same GID (say 1000). Then when I save a file as 
deon:users on any system - if that system exports a filesystem via NFS, any 
other system I can still access it (because deon:users = 2000:1000).

So if you are sharing stuff to your PI - and the files are owned 
paulie420:users, and the Pi application is running as pi:users - while 
"paulie420" and "pi" can have different UIDs - your users group should have the 









































































































































































































































































































































































































































































































































































































































































































































































































































































































same GID. Then if you files and dirs have g=rwx (then your "pi:users" user can 
read your files on the NAS that are owned by paulie420:users).

(Its perfectly legal that the UID for "pi" and "paulie420" be the same number, 
then u=rwx would apply.)

IE: It doesnt matter what the text is for a user or a group (that's for us 
humans), its the IDs that they map to that is important for access control.

Now, if you doing stuff as "root", then there is a different issue to address - 









































































































































































































































































































































































































































































































































































































































































































































































































































































































since NFS can map root to "nobody" if nfs_root_squash is used (its a protective 









































































































































































































































































































































































































































































































































































































































































































































































































































































































thing, but it can trip you up every now and again).

....лоеп

.... Deny thy father and forget thy tagline.
--- SBBSecho 3.13-Linux
 * Origin: I'm playing with ANSI+videotex - wanna play too? (1337:2/101)

.