Services for NFS won't connect to 2003R2 user name mapping

[morganw]

I've setup an instance of 2003R2 just to use the user name mapping for NFS, this is pulling data from an NIS server running on Debian and I can see the simple user mappings are generated successfully.

 

The actual files I need to share via NFS with authentication are on a 2008R2 server (and it's a lot of data so I can't easily move it somewhere else). I installed the Service for NFS feature and set it up to use the 2003R2 server for user name maps but it logs this error every 30 seconds:

Event ID 1005 — NFS User Name Mapping Connection

 

I've turned the firewalls off on both servers, and tried using the hostname and FQDN of the 2003R2 server but I still get the error.

 

Any ideas what would be stopping this from working?

[sukh]

Hi

 

What domain/forest functional level are you running?

 

Sukh

[morganw]

2008R2

[sukh]

Hi

 

When you try to access the files on the 2008R2 server, which client are you trying to access them from?

 

Sukh

[morganw]

OS X 10.6

I can connect if I allow authentication for unmapped users.

[sukh]

Hi

 

1. Has this ever worked?

2. Have you created the maps correctly? Are they identical?

3. Have you installed NFS authentication on all your DC's? Are you using local mapping only?

4. Are your clients part of the same domain?

5. Have you checked the .maphosts file to see if the computer is granted access for USer Mapping?

6. Can you test using another client?

Edited March 22, 2011 by sukh

[morganw]

No the user authentication has never worked (as the NFS server can't read any information from the port map server). The maps are generated by a Centrify Direct Control NIS server so this will handle the link between the unix accounts and the windows ones - I presume I don't need anything on the domain controllers. I can see the maps on the 2003R2 server with no problems and everything looks fine. Everything is part of the same domain.

 

I think you've found the answer with the .maphosts files. I've never edited it so I presume the it's restricting the use of the user name mapping service to the localhost rather than allowing my 2008R2 server to read the data.

 

Much obliged.