Hi.
I have a file server that provides NFS shares for users and automated processes to access data, access is controlled using filesystem acls. I created an NFS mount for a file location that needs to available via https and mounted the used public_html as the mount point. I created the same user with the same UID and GID on the NFS server as that user in Virtualmin that Apache uses.
the issue is if the directory on the file server doesn't have the "other" read and execute bit set ( drwxrwx---+ ) then Apache gives access denied error page, even thou the apache user and group have full access via file system acls and even the default file system user and groups.
Where am I going wrong ? I don't want this share to be open for random users to access why is Apache not able to read the filesystem given its the owner.
file permissions of the directory mounted into public-html on the Virtualmin server.
getfacl fpga-team-pub/
# file: fpga-team-pub/
# owner: fpga-pub
# group: fpga-pub
user::rwx
user:fpga-pub:r-x
group::rwx
group:fpga-pub:rwx
mask::rwx
other::---
default:user::rwx
default:user:fpga-pub:r-x
default:group::rwx
default:group:fpga-pub:rwx
default:mask::rwx
Thank you.
G