SOLVED Adding nfs share from truenas scale to proxmox gives permission denied (500) error

dias

Dabbler
Joined
Nov 3, 2022
Messages
24
Hi,
I am trying to add a nfs share to my proxmox server from truenas scale but whatever i try it gives me permission denied error. Whay may i doing wrong?

Here is what i tried;

First i added a dataset named proxmox like the picture below

s1.png


and then created a user named pveuser and gave permissions: (in group Editors)

s2.png


and then added a nfs share for this dataset like below also tried mpall to root but didnt matter :(

s3.png


And here is proxmox settings :(

s4.png


Whatever i tried i couldnt pass this permission denied message. Any help appreciated.
 

morganL

Captain Morgan
Administrator
Moderator
iXsystems
Joined
Mar 10, 2018
Messages
2,694
TrueNAS SCALE doesn't act as an NFS client... can you try to describe your setup and goal better.
 

dias

Dabbler
Joined
Nov 3, 2022
Messages
24
TrueNAS SCALE doesn't act as an NFS client... can you try to describe your setup and goal better.
Hi,
I am trying to add my truenas scale nfs shares to my proxmox, truenas is the server not client, proxmox is the client. I will add my truenas nfs shares to proxmox so i will be able to backup my proxmox to truenas whenever i need.
 

Lix

Dabbler
Joined
Apr 20, 2015
Messages
27
Mapping user ang group should do the trick, what does the filesystem perms look like?
 

dias

Dabbler
Joined
Nov 3, 2022
Messages
24
Mapping user ang group should do the trick, what does the filesystem perms look like?
The second picture shows the permissions of the dataset i created for this purpose. Also i tried
maproot user = pveuser, maproot group = Editors
Or
mapall user = nobody, mapall group = no group
or
mapall user =root

Nothing worked
 

dias

Dabbler
Joined
Nov 3, 2022
Messages
24
Any luck?

I've never used Proxmox, but I would assume the NFS client would have username password settings somewhere... ?
Are there any NFS permsissions for hosts or networks?

Suggest documenting the error message...
Hi as far as i know proxmox only tries to connect through its own root account and ppl say that you dont need to add any user for connecting it ro truenas, you just need to map it it in truenas settings unfortunately i couldnt manage to do it no matter what maproot or mapall settings i tried.
 

jgreco

Resident Grinch
Joined
May 29, 2011
Messages
18,680
I've never used Proxmox, but I would assume the NFS client would have username password settings somewhere... ?

That's not how NFS has worked, historically. The NFS "client" is in the kernel and is designed to be a filesystem level service, i.e. for all users.
 

morganL

Captain Morgan
Administrator
Moderator
iXsystems
Joined
Mar 10, 2018
Messages
2,694
Hi as far as i know proxmox only tries to connect through its own root account and ppl say that you dont need to add any user for connecting it ro truenas, you just need to map it it in truenas settings unfortunately i couldnt manage to do it no matter what maproot or mapall settings i tried.
Can you connect to the NAS from any other system (e.g laptop).... historically these errors can occur if there are networking issues.

There a few other diagnostic steps in this thread.

 
Last edited:

dias

Dabbler
Joined
Nov 3, 2022
Messages
24
Can you connect to the NAS from any other system (e.g laptop).... historically these errors can occur if there are networking issues.

There a few other diagnostic steps in this thread.

Yes i can connect the same share from my main computer
 

fonze98

Dabbler
Joined
Oct 9, 2021
Messages
23
The only way I have been able to get this to work in scale is in the advanced settings of the share to set both "maprootuser" and "maprootgroup" to root this is equivalent to setting no_root_squash and will actually show up that way in the /etc/exports file. I don't know that I would do this in a production environment but in my lab I am ok with it.
 

jgreco

Resident Grinch
Joined
May 29, 2011
Messages
18,680
The only way I have been able to get this to work in scale is in the advanced settings of the share to set both "maprootuser" and "maprootgroup" to root this is equivalent to setting no_root_squash and will actually show up that way in the /etc/exports file. I don't know that I would do this in a production environment but in my lab I am ok with it.

That's the way this is supposed to be handled in a UNIX environment where the client is acting with superuser ID, which includes both Proxmox and ESXi, from what I've seen. It is unclear what you would do differently in a "production environment", as you presumably wouldn't rewrite NFS client and server code to work differently in such an environment.
 

jgreco

Resident Grinch
Joined
May 29, 2011
Messages
18,680
I have a same/similar issue. How did you solve your problem?

Have you tried setting the mapall settings? NFS does not have Samba-like login and password for individual sessions. It is not a protocol feature.
 

RayRayNoob

Cadet
Joined
Jan 1, 2024
Messages
6
Have you tried setting the mapall settings? NFS does not have Samba-like login and password for individual sessions. It is not a protocol feature.
yes, i followed every thread and search about my issue. When i try to add the share in Proxmox i am suppose to get a dropdown menu shoing the shares on the ip adress from truenas, but i get notting. If I manually set the path I get a permission error when I try to send data to the share.
This is my truenas setup:

Code:
ray@truenas:/$ cat /etc/exports


"/mnt/RayStore-HDD/proxmox/backups"\
        10.10.1.0/24(sec=sys,rw,anonuid=3001,anongid=3001,no_subtree_check)
ray@truenas:/$
 

RayRayNoob

Cadet
Joined
Jan 1, 2024
Messages
6
yes, i followed every thread and search about my issue. When i try to add the share in Proxmox i am suppose to get a dropdown menu shoing the shares on the ip adress from truenas, but i get notting. If I manually set the path I get a permission error when I try to send data to the share.
This is my truenas setup:

Code:
ray@truenas:/$ cat /etc/exports


"/mnt/RayStore-HDD/proxmox/backups"\
        10.10.1.0/24(sec=sys,rw,anonuid=3001,anongid=3001,no_subtree_check)
ray@truenas:/$
8f9cea56-a6b1-4f5f-a5c8-9f5fb9ae115f.jpg
 

jgreco

Resident Grinch
Joined
May 29, 2011
Messages
18,680
That doesn't look to be root UID/GID. Bearing in mind that I haven't looked at the current SCALE UI and that whatever picture you included didn't make it, did you set "Advanced" and go to "Maproot user = root" and "Maproot group = root" ?
 

RayRayNoob

Cadet
Joined
Jan 1, 2024
Messages
6
That doesn't look to be root UID/GID. Bearing in mind that I haven't looked at the current SCALE UI and that whatever picture you included didn't make it, did you set "Advanced" and go to "Maproot user = root" and "Maproot group = root" ?
Yes you are correct. This is the owner for the datashare and also the uset set in Maproot User and Maproot Group.
However, I´ve also tried to set Maproot User/Group as root:wheel, and changed the owner of the dataset to root, but the result is the same.
 

RayRayNoob

Cadet
Joined
Jan 1, 2024
Messages
6
Yes you are correct. This is the owner for the datashare and also the uset set in Maproot User and Maproot Group.
However, I´ve also tried to set Maproot User/Group as root:wheel, and changed the owner of the dataset to root, but the result is the same.
10.10.1.60-TrueNAS-10.10.1.60.png
 
Top