Stefano, I think my ldap woes were indeed related to the bug you mentioned. Sorted it out by deleting the offending "nfstest" manually in both ldap and db accounts after installing the latest updates to the test machine.
Anyway, back to OP, some observations:
- after creating or modifying an nfs share, there is a somewhat significant delay (> 20 sec.) both on mounting the nfs share on a client and and on issuing the first commands on a client (eg. cd'ing into the directory where the share is mounted). Probably due to nfsd and rpcbind being restarted on every change - is this really necessary or would an "exportfs -ra" be sufficient?
- read-write access still is a mixed bag in terms of user experience; the 'no_root_squash' option at least allows remote root on the client to create subdirs in the mount directory which ordinary client users can access, though.
on server:
[root@smeserver ~]# showmount -e
Export list for smeserver:
/home/e-smith/files/ibays/nfstest3/files 192.168.99.65
[root@smeserver ~]# tail -1 /etc/exports
/home/e-smith/files/ibays/nfstest3/files 192.168.99.65(hide,sync,wdelay,rw,no_root_squash,secure)
on client:
test@smeclient ~ $ time sudo mount -t nfs 192.168.99.1:/home/e-smith/files/ibays/nfstest3/files tmp
real 0m16.048s
user 0m0.004s
sys 0m0.008s
test@smeclient ~ $ mount |tail -1
192.168.99.1:/home/e-smith/files/ibays/nfstest3/files on /home/test/tmp type nfs (rw,vers=4,addr=192.168.99.1,clientaddr=192.168.99.65)
Transcript of testing read-write access on client, note ownership and permissions on mountpoint and its subdirs (test:test is a user with sudo privilege on the smeclient VM):
test@smeclient ~/tmp $ mkdir testdir
mkdir: cannot create directory 'testdir': Permission denied
test@smeclient ~/tmp $ sudo mkdir testdir
test@smeclient ~/tmp $ ls -l
drwxr-sr-x 2 nobody 4294967294 4096 Dec 9 20:49 testdir
test@smeclient ~/tmp $ ls -la
drwxrwsr-x 3 nobody 4294967294 4096 Dec 9 20:49 .
drwxr-xr-x 25 test test 4096 Dec 9 20:06 ..
drwxr-sr-x 2 nobody 4294967294 4096 Dec 9 20:49 testdir
test@smeclient ~/tmp $ sudo chown test:test testdir
test@smeclient ~/tmp $ ls -la
drwxrwsr-x 3 nobody 4294967294 4096 Dec 9 20:49 .
drwxr-xr-x 25 test test 4096 Dec 9 20:06 ..
drwxr-sr-x 2 nobody test 4096 Dec 9 20:49 testdir
test@smeclient ~/tmp $ sudo chmod -R g+w testdir
test@smeclient ~/tmp $ ls -la
drwxrwsr-x 3 nobody 4294967294 4096 Dec 9 20:49 .
drwxr-xr-x 25 test test 4096 Dec 9 20:06 ..
drwxrwsr-x 2 nobody test 4096 Dec 9 20:49 testdir
test@smeclient ~/tmp $ cd testdir/
test@smeclient ~/tmp/testdir $ ls -la
drwxrwsr-x 2 nobody test 4096 Dec 9 20:49 .
drwxrwsr-x 3 nobody 4294967294 4096 Dec 9 20:49 ..
test@smeclient ~/tmp/testdir $ touch testfile.txt
test@smeclient ~/tmp/testdir $ ls -l
-rw-r--r-- 1 nobody 4294967294 4 Dec 9 21:11 testfile.txt