Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 28 Apr 2012 23:54:05 -0400
From:      Robert Simmons <rsimmons0@gmail.com>
To:        freebsd-fs@freebsd.org
Subject:   NFSv4 Questions
Message-ID:  <CA%2BQLa9A-ZzupAaLxiuc_0uGYyOOmgcYfxE8SH5cxzMR8gxOGpQ@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
I've been digging and digging to find sources to clarify the
exports(5) man page with no luck.  What I have read differs from what
I see on my server.  From the man page examples section:

V4: /   -sec=krb5:krb5i:krb5p -network 131.104.48 -mask 255.255.255.0

Now, here is what I have put as an experiment to try to understand
what's happening here (my /etc/exports):

V4: / -sec=krb5 -network 192.168.1 -mask 255.255.255.0
/

In this case, -sec=krb5 is totally ignored.  I can mount / using sys.

If I use this:

V4: /
/ -sec=krb5

It requires proper kerberos authentication.

My next question is can I reject NFSv3/v2 clients/connections?

Third question is: how can I disable rpcbind?  It seems that the
following does not work in rc.conf:
rpcbind_enable="NO"
When I'm running NFSv4 rpcbind is not needed, but it seems that mountd
always starts rpcbind no matter what I do:
/etc/rc.d/rpcbind stop
is the only way to do it, and that is only after boot, or mountd starting.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2BQLa9A-ZzupAaLxiuc_0uGYyOOmgcYfxE8SH5cxzMR8gxOGpQ>