Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[solved] NFS and different "sec="
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Psi15
Tux's lil' helper
Tux's lil' helper


Joined: 07 Jan 2003
Posts: 86
Location: Vienna

PostPosted: Tue Feb 01, 2011 9:23 pm    Post subject: [solved] NFS and different "sec=" Reply with quote

Hi!

I've set up my machine using Kerberos 5 to mount the home directory of the users. The server on the other hand is also exporting the /usr/portage/distfiles directory. Unfortunately I cannot state a different sec= parameter for the distfiles share than for the home share (if I try to mount when those parameters don't match I get an "operation not permitted" error). Is it simply not possible to use different security flavors on different shares in NFS4?

Not working /etc/exports:
Code:

# /etc/exports: NFS file systems being exported.  See exports(5).
/exports                *(fsid=0,rw,async,no_subtree_check,sec=krb5p)
/exports/home           *(rw,async,no_subtree_check,sec=krb5p)
/exports/distfiles      *(rw,async,no_subtree_check,sec=sys)
/exports/gd             *(rw,async,no_subtree_check,sec=krb5p)


working /etc/exports:
Code:

# /etc/exports: NFS file systems being exported.  See exports(5).
/exports                *(fsid=0,rw,async,no_subtree_check,sec=krb5p)
/exports/home           *(rw,async,no_subtree_check,sec=krb5p)
/exports/distfiles      *(rw,async,no_subtree_check,sec=krb5p)
/exports/gd             *(rw,async,no_subtree_check,sec=krb5p)


Last edited by Psi15 on Tue Feb 01, 2011 9:31 pm; edited 1 time in total
Back to top
View user's profile Send private message
Psi15
Tux's lil' helper
Tux's lil' helper


Joined: 07 Jan 2003
Posts: 86
Location: Vienna

PostPosted: Tue Feb 01, 2011 9:31 pm    Post subject: Reply with quote

Ha - I fixed it...

here's the correct /etc/exports:
Code:
# /etc/exports: NFS file systems being exported.  See exports(5).
/exports                *(fsid=0,rw,async,no_subtree_check,sec=krb5p:sys)
/exports/home           *(rw,async,no_subtree_check,sec=krb5p)
/exports/distfiles      *(fsid=1,rw,async,no_subtree_check,sec=sys,no_root_squa$
/exports/gd             *(rw,async,no_subtree_check,sec=krb5p)
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum