topic Re: PCNFS security issues in Operating System - HP-UX

PCNFS security issues

Chet Woods — Thu, 22 May 2003 15:03:29 GMT

I'm trying to stop users from being able to login through the "Reflections PCNFS client" as anonymous. Our /etc/exports file looks like this normally:
/apps -anon=65534
/users -anon=65534
/usr/spool/pcnfs -anon=65534

I changed the 65534 to "-1" per the man page for exportfs, and now it won't let anyone login through PCNFS. Any help??

Thanks,
Chet

Re: PCNFS security issues

Tom Danzig — Thu, 22 May 2003 16:13:58 GMT

Are users supplying a username and password as in:

nfs link z: \\host\/tmp user passwd

Re: PCNFS security issues

Helen French — Thu, 22 May 2003 16:18:13 GMT

Are all users connecting through reflection using a user name and password? Are you able to mount it through another Unix system? Are the daemons running? Did you try restarting NFS daemons?

Re: PCNFS security issues

Tim Nelson — Fri, 23 May 2003 12:39:21 GMT

You should be able to restrict access by setting the "access" option in the /etc/exports file.
/uxfilesystem -anon=65534,access=allowedhost1:allowedhost2:allowedhost3

Other users will still be able to see printers and file system folders but will be unable to navigate or retrieve files.
I have been moving away from PCNFS and installing SAMBA which is included with HPUX as a free add-on. This allows direct CIFS(NFS) Server or CLient services to/from UNIX servers to/from Intel platforms and can use NT authentication. Admined via a webpage. Works great.