Automount security

[Chun-Pang Li]

Hi,

In a single File server which shared by different companies, how any I set-up a automount table to them and make them can't see other's directory?

for example:
if I export /account on the server,

user mount as:
user_a /account/com_a/user_a
user_b /account/com_b/user_b

when user_b cd to the higher level, he can only see his own company directory: com_b, so as user_a in com_a

Thanks,

[Cheryl Griffin]

Access is controlled by the maps that you configure. The easiest way to configure a map is to use SAM.

SAM --> Networking and Communications --> Exported Local File Systems

Here you can define which local directory to export, what read-write access is allowed, and which remote hosts have access.

Once you have done this through SAM, you can look at the log to determine what files were configured. These details will allow you to configure automounter without having to use SAM.

[Shyam Kishore]

Hi,

First thing is while exporting any directory we can't control the subdirectories inside that through automount. For that we have to use normal file permissions.

You can remove execute permissions to others and/or group to the subdirectory, to avoid the intruders . First seperate both com_a and com_b users by adding them to two different groups. then

#chmod o-x user_a
#chmod o-x user_b

Now nobody other than the user and his group can access the files in users home directory.

-Shyam