# Elasticsearch snapshots failing

**URL:** <https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285>\
**Category:** Elasticsearch\
**Created:** [October 5, 2018, 10:11pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285 "2018-10-05T22:11:15Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![wazzu62](https://avatars.discourse-cdn.com/v4/letter/w/46a35a/32.png) [@wazzu62](https://discuss.elastic.co/u/wazzu62)\
**Post date:** [October 5, 2018, 10:11pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285/1 "2018-10-05T22:11:15Z")

</div>

attempting to do some ES snapshots to some nfs mounts - getting a permissions error that the NFS directory is not accessible on the node. The nfs shares seems to work ok, I can create and delete things.

I notice when I run this command to create a snapshot "bucket" using this command

PUT /\_snapshot/foo\_snapshots01  
{  
"type": "fs",  
"settings": {  
"location": "/FOO\_SNAPSHOTS01"  
}  
}

I see a directory created in /FOO\_SNAPSHOTS01 test\_XXXX that is owned by sssd and not elasticsearch the user running elasticsearch.

has anyone seen this with snapshots? Trying to figure out if there is a setting in sssd or NFS to mitigate this.

---

<div class="post-metadata">

**Author:** ![vld53](https://avatars.discourse-cdn.com/v4/letter/v/8e7dd6/32.png) [@vld53](https://discuss.elastic.co/u/vld53)\
**Post date:** [October 5, 2018, 10:47pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285/2 "2018-10-05T22:47:38Z")

</div>

What permission of your "FOO\_SNAPSHOS01" folder? Elasticsearch have permisson for read/write/execute?

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [October 7, 2018, 7:03am UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285/3 "2018-10-07T07:03:35Z")

</div>

> [@wazzu62](#):
>
> I see a directory created in /FOO\_SNAPSHOTS01 test\_XXXX that is owned by sssd and not elasticsearch the user running elasticsearch.

Elasticsearch creates this directory, and some files therein, to verify that each node has write access to the repository. That it's owned by the wrong user suggests something wrong with your setup, perhaps on just one of your nodes. If I remember correctly, unless configured otherwise NFS expects numeric user IDs and group IDs to be the same across all machines, so perhaps there is a mismatch there such that the `sssd` user on one machine has the same user ID as the `elasticsearch` user on another?

---

<div class="post-metadata">

**Author:** ![wazzu62](https://avatars.discourse-cdn.com/v4/letter/w/46a35a/32.png) [@wazzu62](https://discuss.elastic.co/u/wazzu62)\
**Post date:** [October 8, 2018, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285/4 "2018-10-08T13:44:44Z")

</div>

The directory permissions are 777

---

<div class="post-metadata">

**Author:** ![wazzu62](https://avatars.discourse-cdn.com/v4/letter/w/46a35a/32.png) [@wazzu62](https://discuss.elastic.co/u/wazzu62)\
**Post date:** [October 8, 2018, 1:45pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285/5 "2018-10-08T13:45:45Z")

</div>

I think it is a UID/GID issue, since the account that is running elasticsearch has different UID/GID on the systems un question

---

<div class="post-metadata">

**Author:** ![wazzu62](https://avatars.discourse-cdn.com/v4/letter/w/46a35a/32.png) [@wazzu62](https://discuss.elastic.co/u/wazzu62)\
**Post date:** [October 9, 2018, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285/6 "2018-10-09T15:31:58Z")

</div>

It was a UID/GID issue. I changed the ES nodes that were different and now am able to perform the snapshots

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 6, 2018, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-failing/151285/7 "2018-11-06T15:31:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
