topic Re: Qtree-level exports in CDOT in ONTAP Discussions

Qtree-level exports in CDOT

bsnyder27 — Thu, 05 Jun 2025 05:34:27 GMT

Anyone able to explain to me how to make them work?

I've tied an export-policy to a qtree w/ a rule allowing a host NFS protocol access - any any any. Getting access denied from the client host when attempting to mount. Tried w/ hostname, FQDN hostname and IP address.

All result in 'access denied by server while mounting'. Adding access at the volume level works though. Maybe I'm missing a step.

Unix Permissions: -s-rwxrwxr-x

Re: Qtree-level exports in CDOT

bsnyder27 — Tue, 01 Jul 2014 12:48:04 GMT

Allow me to ask a further question that may be easier for someone to answer now that I think I might get it myself.

It looks as though qtree-level exports merely allow you to make access unique to the underlying qtrees within a volume, but access still needs to be allowed at the volume level for all rules defined at the qtree-level.

So access to underlying qtrees can be more restrictive than access at the volume level. But in the case where you want to give more access at the qtree-level than you do the volume-level...it's not possible due to the way junction paths function requiring the hierarchical access. Is this correct?

Re: Qtree-level exports in CDOT

aborzenkov — Tue, 01 Jul 2014 13:28:14 GMT

Yes, this is correct. This is also documented this way. You cannot export nested mounts with less restrictive permissions than parent mounts.