NFS server configuration-Linux Enterprise Application-Linux server application information. For more information, see the following section.
1. Create a shared directory
2. Create or modify the/etc/exports configuration file
The content of this file is very simple. Each line consists of the throw path, the list of Customer names, and the Access Options followed by each customer name:
[Shared directory] [host name or IP address (parameter, parameter)]
The parameters are optional. If no parameter is specified, nfs uses the default option. The default sharing options are sync, ro, root_squash, and no_delay.
If the host name or IP address is empty, it indicates that the shared IP address is used to provide services to any client.
If you share the same directory with multiple clients but have different permissions for each client, you can:
[Shared directory] [host name 1 or IP1 (parameter 1, parameter 2)] [host name 2 or IP2 (parameter 3, parameter 4)]
Below are some common NFS sharing parameters:
Ro read-only access
Rw read/write access
Sync all data written for sharing upon request
Async NFS can request data before writing data
Secure NFS is sent through the secure TCP/IP ports below 1024
Insecure NFS is sent over port 1024
Wdelay if multiple users want to write data to the NFS Directory, group write (default)
No_wdelay if multiple users want to write data to the NFS Directory, write the data immediately. This setting is not required when async is used.
Hide does not share its subdirectories in the NFS shared directory.
No_hide shares the subdirectory of the NFS Directory
Subtree_check if sub-directories such as/usr/bin are shared, force NFS to check the permissions of the parent directory (default)
No_subtree_check is opposite to the above. The parent directory permission is not checked.
All_squash: The UID and GID of the shared file are mapped to the anonymous user anonymous, which is suitable for public directories.
No_all_squash retains the UID and GID of the shared file (default)
Root_squash all requests of the root user are mapped to the same permissions as those of the anonymous user (default)
The no_root_squas root user has full management access permissions to the root directory.
Anonuid = xxx specifies the UID of an anonymous user in the NFS server/etc/passwd file
Anongid = xxx specifies the GID of anonymous users in the NFS server/etc/passwd file
The configuration file/etc/exports is as follows:
$ Cat/etc/exports
/Home/share 192.168.102.15 (rw, sync) * (ro)
Configuration Description: grant the read and write permissions to 192.168.102.15. Other machines only have the read-only permission.
3. Restart the NFS service.
#/Etc/init. d/nfs-kernel-server restart
4. View NFS resource sharing on the client
# Showmount-e 192.168.102.47
Export list for 192.168.102.47:
/Home/share (everyone)
5. Use the mount command to mount shared resources.
Load shared resources on client 192.168.102.15
# Mount 192.168.102.47:/home/share/mnt
# Cd/mnt
# Echo '000000'> 12345
You can find that the shared directory on the server is writable.
# Umount/mnt
Load shared resources on client 192.168.102.61
# Mount 192.168.102.47:/home/share/mnt
# Cd/mnt
# Ls
123
# Touch321
Touch: cannot touch '000000': Permission denied
# Echo '000000'> 123455
-Bash: 123: Permission denied
You can find that only the read permission is available for the server shared directory,
This is consistent with our server-side permission settings.
Do we need to restart the nfs service every time we modify the configuration file? At this time, we can use the exportfs command to re-scan the/etc/exports file to make the change take effect immediately.
For example:
# Exportfs-au Uninstall all shared directories
# Exportfs-rv share all directories again and output details
The exportfs command is provided by the software package nfs-kernel-server. For more information about the exportfs command, see:
Man exportfs
When resources are shared, how do we know which permissions are granted? Now we can view the/var/lib/nfs/etab file, which is generated by the exportfs command according to/etc/exports.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
