topic Re: Restricting showmount in Operating System - HP-UX

Restricting showmount

SoorajCleris — Fri, 22 Oct 2010 16:43:14 GMT

Hi Mates,

How can I restrict clients from seeing the exports from my NFS server?

server - HP-UX 11.31.

If I do showmount -e from ZZZ client, if the ZZZ client is not authorised to see that , it should not be able to see the exports.

How can I do this?

post your suggestions; points assured!!

Regards,
Sooraj

Re: Restricting showmount

Jibin Antony — Sat, 23 Oct 2010 12:41:08 GMT

I was also looking for this.

I tried adding following entries in /var/adm/inetd.sec too. (11.31)

# cat /var/adm/inetd.sec
mountd deny
mountd allow w.x.y.z a.b.c.d

# inetd -c

Still all clients are able to see exports using "showmount -e nfsserver". Tried restarting nfs.core, nfs.server and nfs.client services, but no luck.

Thanks in advance.
Jibs

Re: Restricting showmount

SoorajCleris — Sun, 24 Oct 2010 14:42:27 GMT

Hi Mates,

waiting for your suggetions !!!

:(

Re: Restricting showmount

SoorajCleris — Mon, 25 Oct 2010 03:57:39 GMT

Hi Jibin,

Thanks for effors,

One of my mate suggested me to try with IPF with RPC.

inetd.sec is not working becuase mountd is not an inetd service.

regards,
Sooraj

Re: Restricting showmount

Jibin Antony — Mon, 25 Oct 2010 05:51:46 GMT

If I understood the man page correctly, inetd.sec should be able to limit the NFS access to selected clients. Here is an excerpt from man page.

-----------
service name { allow | deny } { hostaddrs | hostnames | netaddrs | netnames }

Note: service name is the name (not alias) of a valid service in file /etc/services. The service name for RPC-based services (NFS) is the name (not alias) of a valid service in file /etc/rpc. A service name
in /etc/rpc corresponds to a unique RPC program number.

----------

Thanks,
Jibin Antony

Re: Restricting showmount

SoorajCleris — Tue, 26 Oct 2010 05:03:04 GMT

Hi Mates,

Waiting for your suggestions!!!

:(

Regards,
Sooraj

Re: Restricting showmount

SoorajCleris — Thu, 28 Oct 2010 01:49:21 GMT

Hi Mates,

Waiting for your suggestions!!!

Regards,
Sooraj

Re: Restricting showmount

SoorajCleris — Sat, 30 Oct 2010 16:40:31 GMT

Hi,

I think it may be a difficult / time taking question.. I am closing this thread.

I got some hint , trying with IP Filter. Still I dont have the procedure. Once I found it , I would update the thread.

I am closing this thready as of now.

regards,
Sooraj

Re: Restricting showmount

SoorajCleris — Sat, 30 Oct 2010 16:43:06 GMT

Will update