Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have NFS4 correctly mapping user and group IDs (using idmapd).

Does group membership have to be synchronised across hosts manually or is it handled by idmapd or NFS itself?


# server users

# server groups

# client users

Is it sufficient to declare the staff group on the client like this:

# client groups

Or do I have to keep the group membership up to date across the hosts myself?


share|improve this question

The correct membership on the server side is sufficient to access the files and directories. Nevertheless, NFS client can make assumptions based on the local credentials and give a false DENY. IOW, it's not required to keep groups on client and server in sync, but it helps to prevent bad surprises.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.