[sshfs] sshfs not working if fuse group membership is given through ldap?

[Hans E. <ha...@so...>]

Hi

I am running diskless workstations in a LAN, where each workstation uses ldap for passwd and group

I cannot use sshfs in this setup, I get a permission denied on fusermount, even if everything looks right.

$ sshfs -osshfs_debug,loglevel=debug foo: /tmp/foo/ > sshfs.log SSHFS version 2.2
Server version: 3
Extension: pos...@op... <1>
Extension: st...@op... <2>
Extension: fst...@op... <2>
fuse: failed to exec fusermount: Permission denied

sent:               0 messages, 0 bytes
received:           0 messages, 0 bytes
rtt min/max/avg:    0ms/0ms/0ms
num connect:        1

$ ls -l /usr/bin/fusermount
-rwsr-xr-- 1 root fuse 24292 20 sep 08.30 /usr/bin/fusermount

$ groups
hans audio plugdev fuse

(I am user "hans")

$ ls -l /dev/fuse 
crw-rw---- 1 root fuse 10, 229  3 okt 08.49 /dev/fuse

$ lsmod | grep fuse
fuse                   42997  1

The problem might be related to what getent group returns. On a workstation, I get

$ getent group | grep fuse

Nothing.

But on the server, which does not use ldap, I get

$ getent group | grep fuse
fuse:x:116:hans,foo,bar

However, when root execute getent on a workstation, the groups from ldap appears:

root@isas:~# getent group | grep fuse
fuse:*:111:hans,foo,bar

The different gids (111, 116) should not matter, since the
workstations have another filesystem than the server.

Does sshfs use the mechanism that the groups-command use, or the
mechanism that getent use?



-- 
Hans Ekbrand (http://sociologi.cjb.net) <ha...@so...>