Network and Storage Protocols

vfiler nfs client gets 'access denied by server'


We have a vfiler which exports a bunch of nfs shares.

Each share has app. 150 clients.

All shares work properly except for one client where we had replaced the LAN card recently.

This client can well mount nfs shares from another filer whichwe have (an FAS3020 7.3.7P3), but it cannot mount from the vfiler which resides on our main FAS3220 8.1.3P3

I already deleted the client from the exports list and re-added it but the mount still gets denied.

I also enabled nfs.mountd.trace on on the vfiler but the syslog on the main filer says:

Client ... (xid 3530981066) in mount, does not have access rights to path...


Is this a known problem?

I guess the problem could be solved by restarting nfs on the vfiler but this would break all running connections.

Is there a way to solve the problem without interrupting nfs for all clients?


This is the output of the mount request on the client:

# mount -vvv -t nfs -overs=3 server1:/vol/vol_storage/storage /mnt/tmp1
mount: fstab path: "/etc/fstab"
mount: mtab path:  "/etc/mtab"
mount: lock path:  "/etc/mtab~"
mount: temp path:  "/etc/mtab.tmp"
mount: UID:        0
mount: eUID:       0
mount: spec:  "server1:/vol/vol_storage/storage"
mount: node:  "/mnt/tmp1"
mount: types: "nfs"
mount: opts:  "vers=3"
mount: external mount: argv[0] = "/sbin/mount.nfs"
mount: external mount: argv[1] = "server1:/vol/vol_storage/storage"
mount: external mount: argv[2] = "/mnt/tmp1"
mount: external mount: argv[3] = "-v"
mount: external mount: argv[4] = "-o"
mount: external mount: argv[5] = "rw,vers=3"
mount.nfs: timeout set for Mon Mar  2 12:13:49 2015
mount.nfs: trying text-based options 'vers=3,addr='
mount.nfs: prog 100003, trying vers=3, prot=6
mount.nfs: trying prog 100003 vers 3 prot TCP port 2049
mount.nfs: prog 100005, trying vers=3, prot=17
mount.nfs: trying prog 100005 vers 3 prot UDP port 4046
mount.nfs: mount(2): Permission denied
mount.nfs: access denied by server while mounting server1:/vol/vol_storage/storage



Found the solution ourselves.


exportfs -b enable save ipAddr allpaths


exports: Turning off NFS for fencing and draining all requests.
exportfs: Turning on NFS for fencing.

This cleans out left overs from the old entry and allows nfs mounting again.