nfs has wrong mode

That's probably your problem. You backup user is writing files which have various Pi user and group id's to the NAS, and the NAS stores those ids, as otherwise every file would belong to the backup user, which isn't what you want.

But the NAS doesn't know about those users and groups, and their relationship to the backup user. To allow the backup user to access those files, they have to be set to world readable and writeable i.e. 777

If you created matching users and groups on the NAS, and made sure the backup user was part of those groups, the NAS would then know who was allowed to access what, and the file permissions could then also be stored correctly.

This is my interpretation of how NFS works, I may be wrong.

---druck

Reply to
druck
Loading thread data ...

Am 08.10.20 um 11:45 schrieb druck:

Problem is solved. It was a NAS NFS setting that has to be corrected. The NAS was set to Windows ACL permissions for shares, but no Windows nor MAC shares are used. After switching to NFS permissions, it works as wanted.

--
cu 
hawe
Reply to
Hans-Werner Kneitinger

My NFS always spreads UIDS, GIDS and permissions *exactly*, using e.g. this style of export line in /etc/exports

/home/spare *(rw,sync,no_root_squash,no_subtree_check)

However obviously to propagate these to the NFS mounted remote file system, rsync *must* run as root.

There can be no 'backup user'

--
"Corbyn talks about equality, justice, opportunity, health care, peace,  
community, compassion, investment, security, housing...." 
 Click to see the full signature
Reply to
The Natural Philosopher

But how well does it handle "so-called posix" ACLs?

Reply to
Andy Burns

Dunno. Never bothered with em.

I assume with *nix either side, NFS would propagate those. Remember it was developed so that SUN clusters could use central disks as if they were locally connected.

Only rarely have I had it behave in slightly weird fashion with respect to permissions, and I never found out why

I tend not to use file permissions as a security measure, much, anyway.

I am more concerned about wide area than local area security.

--
New Socialism consists essentially in being seen to have your heart in  
the right place whilst your head is in the clouds and your hand is in  
 Click to see the full signature
Reply to
The Natural Philosopher

ElectronDepot website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.