IBM DFS, Reference Manual

Page: 31 / 67

To end the authenticated session before the DCE credentials expire, issue the
dfs_logout
command from the NFS client. The command removes the user’s
entry from the authentication table on the Gateway Server machine. The
command can be issued either by the user whose entry is to be removed from
the authentication table or by a user who is logged into the NFS client as the
local superuser root. The command has no effect on authenticated access that
the user has established with other NFS clients.
The syntax of the dfs_logout command follows:
dfs_logout [ -h hostname ] [ dce_principal ]
where:
-h hostname
Specifies the hostname of the Gateway Server machine. By default, the
command uses the hostname of the machine that exports /... to the
NFS client. Use this option to contact a different Gateway Server.
dce_principal
Specifies the DCE principal name of the user whose entry is to be
removed from the authentication table. By default, the command
deletes the entry for the user who issues the command.
For example, the following ends the authenticated session of the issuer of the
command:
$ dfs_logout
Authenticating to DCE from a Gateway Server Machine
The dfsgw add command authenticates a user to DCE from a Gateway Server
machine. Users can use the dfsgw add command if the dfs_login command is
not installed on the NFS client from which they desire access to DFS. System
administrators can use the command to administer authenticated access to
DFS from a Gateway Server machine. Note that for NFS clients not configured
to enable DCE authentication, the dfsgw add command represents the only
way to authenticate with DCE.
The dfsgw add command provides essentially the same functionality as the
dfs_login
command. However, unlike the dfs_login command, the dfsgw add
command does not communicate with the Gateway Server (dfsgwd) process;
it creates the login context and entry in the authentication table. In addition, it
requires the issuer to identify the user for whom authenticated access is
desired and the NFS client from which the user is to access DFS. Also, the
dfs_login
command allows the issuer to request a ticket lifetime.
To end a user’s authenticated session from a specified NFS client, issue the
dfsgw delete
command on the Gateway Server machine. The command
Chapter 4. Accessing DFS from an NFS Client
21