Troubleshooting Services for Network File System
Applies To: Windows Server 2008
This section lists a few common issues you might encounter when working with Services for Network File System (NFS).
For more information about Services for NFS, see the Windows Server TechCenter (https://go.microsoft.com/fwlink/?LinkId=92798).
Despite appearing to have appropriate permissions, the user cannot access folder or file
Authenticated users cannot access Network File System resources
Users, including properly mapped users, cannot change the current directory to a shared directory or create files in the directory, even though anonymous access to the directory is allowed
All files created on Server for NFS are owned by Anonymous
Files created by a new user are owned by Anonymous
A user cannot write to a file
Users of Japanese UNIX systems cannot view file names in Japanese
Server for NFS configuration settings are not replicated across nodes in a server cluster
Server for NFS fails to stop on a server cluster
An NFS shared resource on a server cluster node fails to come online
Creating or modifying an NFS shared resource fails with the error: The share path specified does not exist, or you are trying to modify the properties of an online shared resource
User Name Mapping is properly configured, but users are not being mapped correctly
A group containing an NFS shared resource fails to come online on a particular cluster server node
The showmount –e command for a virtual server lists all shared resources on the node rather than those in the same group as the virtual server
The root user is not granted proper permissions
Anonymous access fails
What problem are you having?
Despite appearing to have appropriate permissions, the user cannot access folder or file
Cause
The user belongs to one or more groups that are not mapped consistently, Active Directory Domain Services is not accessible, or User Name Mapping is not running.
Solution
To ensure proper file access, ensure that Windows and UNIX groups that are mapped to each other, in either Active Directory Domain Services or User Name Mapping, contain the same users, and that the members of the Windows and UNIX groups are properly mapped to each other. Also, ensure that Active Directory Domain Services is accessible or the User Name Mapping service is running on the designated server.
Authenticated users cannot access Network File System resources
Cause
Active Directory Lookup or User Name Mapping is not properly configured to work with this computer.
Solution
If you are using Active Directory Lookup, ensure that Services for Network File System (NFS) is pointing to the proper Active Directory domain.
If you are using User Name Mapping, ensure that the .maphosts file on the computer running User Name Mapping specifies the names or Internet Protocol (IP) addresses of computers that can map user accounts by using User Name Mapping. If users cannot access NFS resources intermittently and configuring the .maphosts file does not solve the problem, it might be that too many client computers are trying to access User Name Mapping simultaneously.
Users, including properly mapped users, cannot change the current directory to a shared directory or create files in the directory, even though anonymous access to the directory is allowed
Cause
Either the NFS client does not support NFS version 3, or Server for NFS is not configured to support NFS 3. Also, the discretionary access control list (DACL) protecting the shared directory does not have an entry for Everyone, and so the access mode bit for Other is reported as 0. Because NFS 2 clients rely on directory mode settings rather than performing a separate access check for the shared directory, the client incorrectly fails the attempted access.
Solution
Do one of the following:
To the DACL protecting the directory being shared, add an entry that grants Everyone read or read/write access, as appropriate.
Ensure that the NFS client supports NFS 3, and enable NFS 3 support by Server for NFS.
The shared directory is not accessible even though it is listed as available.
Cause
The directory was moved after it was shared.
Solution
Return the directory to its original location, or stop sharing the directory and then reshare it.
All files created on Server for NFS are owned by Anonymous
Cause
Authentication is not configured properly.
Solution
Ensure that mappings are set up correctly in Active Directory Domain Services or in User Name Mapping, and that Server for NFS is correctly configured to use either Active Directory Lookup or User Name Mapping. Also, be sure all domain controllers are properly configured.
Files created by a new user are owned by Anonymous
Cause
If you are using User Name Mapping, then User Name Mapping and Server for NFS have not yet refreshed data from the Network Information Service (NIS) server. Typically, User Name Mapping refreshes data from NIS once an hour, and Server for NFS refreshes data from User Name Mapping once an hour.
Solution
The new user should wait at least two hours before attempting to access or create files on Server for NFS, or the administrator of the computer running User Name Mapping can refresh the mapping database.
A user cannot write to a file
Cause
File permissions or attributes do not allow write access to the file or its directory.
Solution
If the directory is owned by the Administrators group, make an individual user account the owner of the directory. Ensure that the user's UNIX account is mapped to a valid Windows account and that the NTFS file system permissions of the directory and file allow write access to the Windows user account. Ensure that the read-only attribute is not set on the file or the directory.
Users of Japanese UNIX systems cannot view file names in Japanese
Cause
Extended UNIX character (EUC) set is not enabled.
Solution
Configure the shared resource to use the appropriate character encoding.
Server for NFS configuration settings are not replicated across nodes in a server cluster
Cause
The Cluster service is not running, was not running when Server for NFS started, or failed after Server for NFS started.
Solution
Take all NFS shared resources owned by the node offline, or move the cluster groups containing NFS shared resources to another node. Stop Server for NFS, start the Cluster service if needed, and then restart Server for NFS. Return the NFS shared resources online or move the cluster groups back to the node.
Server for NFS fails to stop on a server cluster
Cause
This is by design. When an NFS shared resource is online on a cluster node, the cluster service automatically restarts Server for NFS to keep the shared resources online.
Solution
Before stopping Server for NFS on a server cluster node, take all NFS shared resources owned by the node offline, or move the cluster groups containing NFS shared resources to another node.
An NFS shared resource on a server cluster node fails to come online
Cause
An NFS shared resource on that node with the same alias or path already exists on the node.
Solution
Make sure that the shared path and alias are unique across the cluster. Also, avoid having nonclustered NFS shared resources on a server cluster node.
Cause
The user who installed the cluster service does not have read permission on the directory that is shared, so the path cannot be validated.
Solution
Grant read access to the directory for the user who installed the cluster service.
Cause
The disk resource containing the directory being shared is offline, so the cluster service cannot verify the path of the share.
Solution
Bring the disk resource online, and then bring the NFS shared resource online. We recommend that the NFS shared resource be made dependent on the disk resource that contains the shared folder.
Cause
The disk is inaccessible due to hardware error.
Solution
Take the NFS shared resources on the disk offline. Ensure that the disk is accessible from all cluster nodes, and then bring the NFS shared resources online.
Cause
There are a large number of subdirectories under a subdirectories-only share, and the resource times out before all the shared resources are created when the resource is coming online.
Solution
Increase the time-out interval for the resource.
Creating or modifying an NFS shared resource fails with the error: The share path specified does not exist, or you are trying to modify the properties of an online shared resource
Cause
The specified directory does not exist.
Solution
Make sure that the directory exists and that the path is correct.
Cause
The shared resource is online.
Solution
Take the shared resource offline, make the required modifications, and then bring the shared resource online.
Cause
The disk resource containing the shared directory is offline, so the cluster service cannot verify the path of the share.
Solution
Bring the disk online, make the necessary modifications to the NFS shared resource, and then bring the NFS shared resource online.
User Name Mapping is properly configured, but users are not being mapped correctly
Cause
Server for NFS is not set to use the correct User Name Mapping server.
Solution
Ensure that the specified User Name Mapping server is valid. If the User Name Mapping server is on a server cluster, ensure that the following conditions exist:
User Name Mapping is installed on all cluster nodes
User Name Mapping data is being replicated to all nodes in the cluster
Server for NFS is using the name of a Network Name cluster resource as the User Name Mapping server, not localhost or the name of any of the cluster nodes
Cause
Server for NFS has not received updated maps from the mapping server. If Server for NFS and User Name Mapping are on different computers, this occurs once every 30 minutes.
Solution
Force Server for NFS to refresh the maps by doing one of the following:
Use the nfsadmin server command to execute an operation, such as by setting a value to its current value.
Restart Server for NFS.
Cause
Account changes on the Windows domain controller or the Network Information Service (NIS) server have not been received by User Name Mapping.
Solution
Force Server for NFS to refresh the maps by doing one of the following:
In Services for Network File System, click Server for NFS, and then click Apply.
Use the nfsadmin server command to execute an operation, such as by setting a value to its current value.
Restart Server for NFS.
Cause
Local accounts on a cluster node were mapped to UNIX user accounts. Local accounts are not valid on all nodes in a cluster.
Solution
Ensure that all Windows accounts mapped to UNIX accounts on User Name Mapping running on a cluster are Windows domain accounts.
Cause
The passwd and group files are not at the same location on all nodes of the cluster, or on a network drive.
Solution
Ensure that the passwd and group files are identical and at identical locations on local disks of all nodes.
Cause
The Server for NFS server is not on the list of permitted User Name Mapping server clients.
Solution
Ensure that the .maphosts files on all User Name Mapping server cluster nodes are identical to permit the node running Server for NFS to obtain maps from the User Name Mapping server.
Cause
The server running User Name Mapping has failed.
Solution
Correct the cause of failure and then restart User Name Mapping on the server.
Cause
A Windows account mapped to a UNIX account is disabled or no longer exists.
Solution
If the Windows account exists but is disabled, enable it. If the account does not exist, create a new account and, if necessary, recreate the corresponding advanced map.
Cause
A Windows user account has not been granted the credentials to log on to the network.
Solution
Grant the required credentials to the Windows user account, and then force Server for NFS to refresh the maps by doing one of the following:
Use the nfsadmin server command to execute an operation, such as by setting a value to its current value.
Restart Server for NFS.
Cause
Windows and UNIX groups mapped to each other do not contain the same members.
Solution
Ensure that all Windows users in a group are mapped to UNIX users in the corresponding UNIX group, and that all UNIX users in a group are mapped to users in the corresponding Windows group.
Cause
User Name Mapping settings are not properly replicated on all nodes in a server cluster.
Solution
Ensure that User Name Mapping on a server cluster is configured properly to allow replication on all nodes.
A group containing an NFS shared resource fails to come online on a particular cluster server node
Cause
Server for NFS is not installed on the node.
Solution
Install Server for NFS on the node.
Cause
The node is not configured as the preferred owner of the group.
Solution
Configure the group properties to make the node the preferred owner of the group.
Cause
One of the resources in the group does not list the node as a possible owner even though the group specifies the node as a preferred owner.
Solution
Configure the resource's properties to specify the node as a possible owner.
The showmount –e command for a virtual server lists all shared resources on the node rather than those in the same group as the virtual server
Cause
This is by design. There is only one instance of Server for NFS running on a node that will enumerate all shared resources on that node. It does not distinguish between shared resources in different cluster groups.
Solution
Maintain different groups on different nodes.
The root user is not granted proper permissions
Cause
The shared resource does not have root access enabled.
Solution
Right-click the shared directory, click Properties, click NFS Sharing, click Permissions, and then click Allow root access.
Cause
The computer from which the root user is accessing the shared resource is not permitted root access.
Solution
Right-click the shared directory, click Properties, click Permissions, and then do one of the following:
Grant root access to ALL MACHINES.
Grant root access to a client group containing the computer.
Grant root access to the computer itself.
Cause
The root user does not have read/write permission.
Solution
Grant the appropriate permissions to the Windows user mapped to the root user. Right-click the shared directory, click Properties, click Permissions, and then click Root access allowed.
Cause
The root user account is not properly mapped to a Windows user account.
Solution
Map the root user to a Windows account in the Administrators or Domain Admins group, and map the root user's group to the same Windows group.
Cause
Server for NFS has not received updated maps from User Name Mapping.
Solution
Force Server for NFS to refresh the maps by doing one of the following:
Use the nfsadmin server command to execute an operation, such as by setting a value to its current value.
Restart Server for NFS.
Cause
The root user's user identifier (UID) is not 0. Server for NFS grants root access only to a UNIX user with a UID of 0.
Solution
Change the root user's UID to 0.
Anonymous access fails
Cause
Local security policy is not set to enable Everyone permissions to apply to anonymous users (the default).
Solution
Use the Local Security Policy manager to enable Network Access: Let Everyone permissions apply to anonymous users in Security Options in Local Policies.