secure ignite nfs xports

[derek b smith_1]

Is there a way to limit what hosts have access to my /var/opt/ignite/clients dir and still have make_net_recovery work?
I have tried every option and it seems ignite needs to have /var/opt/ignite/clients -anon=2
in order to work.
all my dirs and subdirs are 775 bin:bin under /var/opt/ignite and ignite itself.
I want/need this to be secure...limiting the make_net_recovery mounts to specific clients.

thank you!

[Steven E. Protter · Accepted solution]

Shalom,

Yes,

There has always been a host/ip limitation in /etc/exports (see the man page for /etc/exports for syntax) and /etc/dfs/dfstab for HP-UX 11.31.

share -F nfs -o anon=2 /extra/osdepot


That anon can be changed to a hostname or ip address.

SEP

[derek b smith_1]

but what about 11.11 clients with a 11.23 master? your solution works for 11.23 clients but not for 11.11 clients. : (