nfs help?

Ambrogio fn050202 at flashnet.it
Thu Jun 8 20:39:04 UTC 2006


Il giorno gio, 08/06/2006 alle 10.26 -0700, bruce ha scritto:
> hi...
> 
> i'm trying to get nfs up/running on a linux server.
NFS is a protocol that is client/server, and is considered not secure
for some reason.

To mitigate this unsecure way to access data from network, there are
some rules that you must specify on /etc/exports.

For a simple examples on the server you must have a /etc/exports in
which you have to indicate a directory to be exported and some rule that
permits clients to access it.

Access rule are based on uid used on client at the mount time.
If you use root on client (for example) to mount an export, tipically
you can't access.
Also you must pay attention to some file (hosts.allow and hosts.deny).

The first rule you can try to make nfs working is a simple line in
exports like that

/path/to/be/exported	ipclient(ro)

and on client side you must mount the export in that way
mount ipserver:/path/to/be/exported /where/you/want/to/mount

in this case you can access the export in read only.

After that (to be sure that nfs in working well) you must read the man
page about exports (man exports) to try other config.
Pay attention to root_squash and no_root_squash option to make root
access not possible on server side.

I hope it is clear
Bye
 Ambrogio




More information about the fedora-list mailing list