11iv3 ONCPlus (AKA NFS) security

[Tim Nelson]

After reading the book, believe it or not, I still must be missing something. Who decided NFS needed replacing? this was better ?(rant)

Attempting to set up the "new and improved" NFS on hpux 11iv3 and cannot seem to secure this product.

I "share" the filesystem with a specified server but it seems to allow read only to just about everyone else.

example of /etc/dfs/dfstab:
share -F nfs -o root=server1,rw=server1 -d "HP SW Dist" /sdist

I can mount and read/write from server1. This is great, but, I can also mount in readonly from server2. I cannot seem to find the way to restrict mount access completely to the "other" servers.

Boy, did Sun take the word "share" seriously. Must be taking Microsoft developer classes !! (default=no security )

Any assistance is greatly appreciated.

[Rasheed Tamton]

Just a thought. Are you using UDP (sure as you know it is unreliable) instead of TCP. Does nffstat -m gives you any useful tips.

[Eric SAUBIGNAC · Accepted solution]

Bonjour Tim,

Remember that "-o rw" means "Read-mostly", that is read-only to most machines, but read-write to those specified

I have no 11iv3 near me to check, but I guess that option "-o access=server1" is still working with NFS v4 to prevent other servers to access the exported FS ?

Regards

Eric

[Rasheed Tamton]

Are you using the automounter -hosts map.

[Tim Nelson]

Thanks Rasheed !!!

The access= option works the way it used to. You would not believe that there is absolutely no mention of it in the share_nfs man page. ( arrggg )

Thank you again.