I'm having trouble getting a Solaris 11.0 server to restrict access to an NFS share to a single client system.
I have roughly the following value for the
share property of a
tank/mail ZFS filesystem:
I cannot mount the share on the client (running Solaris 11.3) at 10.0.23.43. I attempt like so:
mount -F nfs keisha:/tank/mail /tmp/mnt
and get the following error:
nfs mount: mount: /tmp/mnt: Permission denied
If I remove
none=* then the client mounts fine. However, it is my understanding that doing so will allow access to clients at any address, which I want to prevent (and yes, I'm aware that it may be possible to spoof the address, but prefer to add whatever hoops I can.)
I have tried reversing the order of
rw, and this changes nothing. I've tried
firstname.lastname@example.org/32 and that doesn't work either.
I've tried opening it up to the whole subnet with
email@example.com/16 and even that doesn't work. I've also double-checked that I have the client's address right. The client can't be using IPv6 to access the server, as the server's DNS entry is only IPv4 and I'm accessing it by name.
Why does restricting the client addresses prevent access even from a client at an explicitly allowed address? How do I fix this?