PCNFS security issues

[Chet Woods]

I'm trying to stop users from being able to login through the "Reflections PCNFS client" as anonymous. Our /etc/exports file looks like this normally:
/apps -anon=65534
/users -anon=65534
/usr/spool/pcnfs -anon=65534

I changed the 65534 to "-1" per the man page for exportfs, and now it won't let anyone login through PCNFS. Any help??

Thanks,
Chet

[Tom Danzig]

Are users supplying a username and password as in:

nfs link z: \\host\/tmp user passwd

[Helen French]

Are all users connecting through reflection using a user name and password? Are you able to mount it through another Unix system? Are the daemons running? Did you try restarting NFS daemons?

[Tim Nelson]

You should be able to restrict access by setting the "access" option in the /etc/exports file.
/uxfilesystem -anon=65534,access=allowedhost1:allowedhost2:allowedhost3

Other users will still be able to see printers and file system folders but will be unable to navigate or retrieve files.
I have been moving away from PCNFS and installing SAMBA which is included with HPUX as a free add-on. This allows direct CIFS(NFS) Server or CLient services to/from UNIX servers to/from Intel platforms and can use NT authentication. Admined via a webpage. Works great.