Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We're serving some NFS shares from a Windows Server 2008 R2 x64 machine, that are accessed by Solaris 5.10 clients. How do we configure authentication so that a certain group have write permission to the shares from Solaris? Thanks for any help! :)

share|improve this question
up vote 2 down vote accepted

We're serving some NFS shares from a Windows Server 2008 R2 x64 machine,

There's your problem right there.

All kidding aside, setting up proper authentication isn't too bad with Services for NFS on Windows. Here's a guide from microsoft with all the relevant details:

share|improve this answer
Having experimented a bit, it doesn't seem like giving RW access to my netgroup makes any difference though? So long as all machines were given RW access, I could write to the mounted share if and only if I had Unix-level write access on the client. When I tried taking away write access from all machines on the server, I couldn't write even if my netgroup had write access. Could you provide some instructions on how to mount a Windows NFS share correctly from a Solaris client? – aknuds1 Mar 21 '11 at 17:01
I'm not following what you're asking. When you mount an NFS share, you're going to be passing your current user information, which should be mapped to a username on the Windows server. Information about advanced mapping on Windows is here: – Hyppy Mar 21 '11 at 17:12
Thanks for the user name mapping info. Part of the problem, though, is that we can't see any way to specify whom to mount as on Solaris. Are you sure user name mapping, as described in that article, is still available in 2008 R2 though? I suspect it's been removed. – aknuds1 Mar 21 '11 at 17:26
It appears I should actually use Active Directory user lookup, in order to map the Unix user who's mounted a share to an AD account. – aknuds1 Mar 21 '11 at 17:43
I'm 99% sure that the user that is accessing the data is what the permissions are based on. The link that I provided is what is linked off the answer's Technet article, which applies to 2008 R2. It should still be applicable. I apologize though, the comment link was for simple mapping. A more complete guide is here:… – Hyppy Mar 21 '11 at 17:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.