The mount request was denied by the NFS server | VMware | Troubleshooting netgroups

Call “HostDatastoreSystem.CreateNasDatastore” for object “datastoreSystem-663108” on vCenter Server failed.
NFS mount failed: The mount request was denied by the NFS server. Check that the export exists and that the client is permitted to mount it.
An unknown error has occurred.

VMware message encountered while trying to mount volume from newly added nodes 13 and 14 in a 14 node cluster running 8.3.2P2.

Troubleshooting steps:

  • Checked namespace export policy – looked good; identical to dozens of other volumes backed by node1 thru node12 already mounted as VMware datastores.
  • Tested mounting on different vSphere hosts – same message.
  • As the export policy uses local netgroups, I checked the local netgroups definitions file:
vserver services name-service netgroup file show  
  • File looked fine.
  • Checked the status of netgroups definitions across all nodes in the cluster – found the culprit:
::> set -privilege advanced

Warning: These advanced commands are potentially dangerous; use them only when directed to do so by NetApp personnel.  
Do you want to continue? {y|n}: y

::*> vserver services name-service netgroup status
Vserver   Node            Load Time           Hash Value  
--------- --------------- ------------------- -------------------
vs01  
          node13 
                          -                   -

          node14 
                          -                   -

vserver services name-service netgroup status enables you to verify that netgroup definitions are consistent across all nodes that back a SVM into which netgroup definitions have been loaded.

The command displays the following information:

  • SVM name
  • Node name
  • Load time for netgroup definitions
  • Hash value of the netgroup definitions

Node13 and node14 contained no load time or hash value, as this is a manual step, and doesn’t happen automatically when a node is added. No worries. To resolve, I reloaded the netgroup file onto the SVMs:

::> vserver services name-service netgroup load -vserver vservername -source http://ipaddress/netgroup.txt

This loaded the netgroup file onto node13 and node14, which took about 5 minutes to build the netgroup.byhost map. (I tried mounting on vSphere host immediately after netgroup load, and got the same error message. Waited 5 minutes, and it mounted fine.)

More on displaying the local netgroup definitions status here:
https://library.netapp.com/ecmdocs/ECMP12452955/html/vserver/services/name-service/netgroup/status.html

Leave a Reply

Your email address will not be published. Required fields are marked *