Q: I've exported a directory from a file server.  Some machines (perhaps) can mount that directory successfully, others cannot, and receive a message like:

Access denied for server:/directory

The directory on the server is exported for universal access (e.g., nidump exports . reports something like

/directory -ro

granting any machine read-only access rights).  What's going on?

A:  What's likely wrong here is that the server doesn't know about the client.  Check the appropriate hosts databases (the machines directory in NetInfo, for example) in all applicable domains.  The client must appear in there somewhere.

This typically will not be seen in a two-level NetInfo hierarchy, but could be seen in a three-level hierarchy.

This feature is an important part of NFS security, and is not a bug.

QA530

Valid for 1.0, 2.0, 3.0, 3.1