Blue Arc Titan SiliconServer, Руководство системного администратора

Страница: 258 / 487

File Services
246 Titan SiliconServer
Note: BlueArc supports the use of NIS netgroups for the NFS export client
access qualifiers.
Here are some examples:
❑
10.1.2.38(ro)
Grants read-only access to the client whose IP address is 10.1.2.38.
❑
yourcompanydept(ro)
Grants read-only access to all members of the NIS group yourcompanydept .
❑
*.mycompany.com(ro, anonuid=20)
Grants read-only access to all clients whose computer name ends .mycompany.com . All
squashed requests are to be treated as if they originated from user ID 20.
❑
10.1.*.* (readonly, allsquash, anonuid=10, anongid=10)
Grants read-only access to all the matching clients. All requests are squashed to the
anonymous user, which is explicitly set as user ID 10 and group ID 10.
The order in which the entries are specified is important. Take the following two lines:
*(ro)
10.1.2.38(rw)
The first grants read-only access to all clients, whereas the second grants read/write access to
the specified client. The second line is redundant, however, as the first line matches all clients.
These lines must be transposed to grant write access to 10.1.2.38.
Notes on Specifying Clients by Name rather than IP Address
• Be sure to specify the fully qualified domain name of the client. For example, type
aclient.dept.mycompany.com rather than simply aclient.
• To specify a partial name, a single wildcard, located at the start of the name, may be
used.
secure Requires requests to originate from an IP port less than 1024.
Access to such ports is normally restricted to administrators of
the client machine. To turn it off, use the insecure option.
insecure Turns off the secure option. This is the default setting.
anon_uid, anonuid Explicitly sets an anonymous user ID.
anon_gid, anongid Explicitly sets an anonymous group ID.
noaccess, no_access Denies the specified clients access to the export.