Looks like root volume export policy was denying access.
simshare-clu::*> check-access -vserver svm1 -volume sim_test -client-ip 10.241.185.35 \
-authentication-method krb5 -protocol nfs3 -access-type read
(vserver export-policy check-access)
Policy Policy Rule
Path Policy Owner Owner Type Index Access
----------------------------- ---------- --------- ---------- ------ ----------
/ default svm_root volume 0 denied
I changed the export policy on svm_root from default, which had no rule, to base_vol, which allows any cifs,nfs,flexcache connection. I’m not sure this is the proper configuration, but now access checks out and I can mount the shares (albeit with permission errors).
simshare-clu::*> check-access -vserver svm1 -volume sim_test -client-ip 10.241.185.35 \
-authentication-method krb5 -protocol nfs3 -access-type read
(vserver export-policy check-access)
Policy Policy Rule
Path Policy Owner Owner Type Index Access
----------------------------- ---------- --------- ---------- ------ ----------
/ root_vol svm_root volume 1 read
/sim_test cifs_first sim_test volume 1 read
It seems wrong to have / wide open to Everyone. Any thoughts?