I have two servers, client and server in fairly obvious roles: server hosts the NFS share and client has it mounted. There is a shared group among several users on client called shared which also exists on server. My permissions on server for the share look like this:user@server $ ls -al /export/share/drwxrwsr-x+ 3 shared shared    4096 Apr 19 01:25 .drwxr-xr-x  3 root  root       4096 Apr 12 20:10 ..The goal is pretty clearly displayed, I'd like all members of the shared group to be able to create, write, and delete files in this directory. On client, a ls -la of the mounted directory leads the same results. The NFS exports file on server looks like this:/export/share 10.0.0.0/24(rw,nohide,insecure,no_subtree_check,async)The mount on client in /etc/fstab looks like this:10.0.0.1:/export/share /mnt/share nfs _netdev,noatime,intr,auto 0 0 The output of mount from client:10.0.0.1:/export/share on /mnt/streams type nfs (rw,noatime,intr,vers=4,addr=10.0.0.1,clientaddr=10.0.0.2)However, I still can't seem to be able to create files in that directory using a user in the group.For instance, a user jack:user@server $ id jackuid=1001(jack) gid=1001(jack) groups=1001(jack),1010(shared)If I try touching a file in the mounted folder on client, permission is denied:user@client $ sudo -u jack touch /mnt/share/atouch: cannot touch `/mnt/share/a': Permission deniedWhy isn't this working as expected? Shouldn't I be able to create files and folders as jack in this folder since he's a member of the shared group?
Default directory permissions over NFS
permissions;nfs
How are you disseminating the user/group info that's contained in /etc/passwd and /etc/group? You typically need to use NIS, LDAP, or rsync the /etc/passwd /etc/group files to all the machines that are automounting these mounts. Otherwise the clients know nothing of the permissions on the filesystem.You might want to peruse the NIS Howto.