NFS for Beginners - Revision history

Kenatonline at 10:59, 5 February 2011

Kenatonline — Sat, 05 Feb 2011 10:59:25 GMT

← Older revision		Revision as of 10:59, 5 February 2011
Line 192:		Line 192:

	[[Category:Howto]]		[[Category:Howto]]
-
-	~~==External Links==~~
-	~~[http://www.stellarinfo.com/mac-data-recovery.htm Data Recovery Mac]<br>~~
-	~~[http://mackeeper.zeobit.com/mac-data-recovery mac recovery]~~

Abhinav: /* External Links */

Abhinav — Fri, 26 Nov 2010 04:20:19 GMT

External Links

← Older revision		Revision as of 04:20, 26 November 2010
Line 194:		Line 194:

	==External Links==		==External Links==
		+	[http://www.stellarinfo.com/mac-data-recovery.htm Data Recovery Mac]<br>
	[http://mackeeper.zeobit.com/mac-data-recovery mac recovery]		[http://mackeeper.zeobit.com/mac-data-recovery mac recovery]

Roderio at 13:14, 28 October 2010

Roderio — Thu, 28 Oct 2010 13:14:51 GMT

← Older revision		Revision as of 13:14, 28 October 2010
Line 192:		Line 192:

	[[Category:Howto]]		[[Category:Howto]]
		+
		+	==External Links==
		+	[http://mackeeper.zeobit.com/mac-data-recovery mac recovery]

Kenatonline: /* Most common usage */

Kenatonline — Fri, 08 Jan 2010 12:51:02 GMT

Most common usage

← Older revision		Revision as of 12:51, 8 January 2010
Line 181:		Line 181:

	Mount command on clients side:		Mount command on clients side:
-	mount -t nfs -o rw,nolock,udp,rsize=8192,wsize=8192 192.168.1.139:/mnt/mymusic /mnt/LS-music	+	mount -t nfs -o rw,soft,nolock,udp,rsize=8192,wsize=8192 192.168.1.139:/mnt/mymusic /mnt/LS-music
-	mount -t nfs -o rw,nolock,udp,rsize=8192,wsize=8192 192.168.1.139:/mnt/mymovies /mnt/LS-movies	+	mount -t nfs -o rw,soft,nolock,udp,rsize=8192,wsize=8192 192.168.1.139:/mnt/mymovies /mnt/LS-movies

	== Some experiences ==		== Some experiences ==

Kenatonline: /* Example configurations */

Kenatonline — Fri, 08 Jan 2010 12:49:15 GMT

Example configurations

← Older revision		Revision as of 12:49, 8 January 2010
Line 100:		Line 100:
	/etc/exports		/etc/exports
	/mnt/mymusic 192.168.1.11(ro)		/mnt/mymusic 192.168.1.11(ro)
		+
		+	Mount command on clients side:
		+	mount -t nfs -o ro 192.168.1.139:/mnt/mymusic /mnt/LS-music

	=== Three directories for one machine each ===		=== Three directories for one machine each ===
Line 112:		Line 115:
	/mnt/backup.12 192.168.1.12(rw)		/mnt/backup.12 192.168.1.12(rw)
	/mnt/backup.13 192.168.1.13(rw)		/mnt/backup.13 192.168.1.13(rw)
		+
		+	Mount command on clients side:
		+	mount -t nfs -o ro 192.168.1.139:/mnt/mymusic /mnt/LS-music

	=== One directory for three machines ===		=== One directory for three machines ===
Line 122:		Line 128:
	/etc/exports		/etc/exports
	/mnt/mymusic 192.168.1.11(ro) 192.168.1.12(ro) 192.168.1.13(rw)		/mnt/mymusic 192.168.1.11(ro) 192.168.1.12(ro) 192.168.1.13(rw)
		+
		+	Mount command on clients side:
		+	mount -t nfs -o ro 192.168.1.139:/mnt/mymusic /mnt/LS-music

	=== One directory for all machines in a specific subnet and one directory for one machine only ===		=== One directory for all machines in a specific subnet and one directory for one machine only ===
Line 135:		Line 144:

	Note: The configuration of /etc/hosts.allow and /etc/exports does NOT depend on each other. You can allow host access to machines which are not mentioned in /etc/exports and vice versa! It is YOUR duty to make a configuration which makes sense! Hosts not allowed to access services do NOT get access because of an entry within /etc/exports!		Note: The configuration of /etc/hosts.allow and /etc/exports does NOT depend on each other. You can allow host access to machines which are not mentioned in /etc/exports and vice versa! It is YOUR duty to make a configuration which makes sense! Hosts not allowed to access services do NOT get access because of an entry within /etc/exports!
		+
		+	Mount command on clients side:
		+	mount -t nfs -o ro 192.168.1.139:/mnt/mymusic /mnt/LS-music
		+	mount -t nfs -o rw 192.168.1.139:/mnt/mymovies /mnt/LS-movies

	=== Fully open to everyone (no security at all) ===		=== Fully open to everyone (no security at all) ===
Line 166:		Line 179:
	/mnt/mymusic 192.168.0.0/255.255.0.0(rw,sync,no_root_squash,no_subtree_check,insecure)		/mnt/mymusic 192.168.0.0/255.255.0.0(rw,sync,no_root_squash,no_subtree_check,insecure)
	/mnt/mymovies 192.168.0.0/255.255.0.0(rw,sync,no_root_squash,no_subtree_check,insecure)		/mnt/mymovies 192.168.0.0/255.255.0.0(rw,sync,no_root_squash,no_subtree_check,insecure)
		+
		+	Mount command on clients side:
		+	mount -t nfs -o rw,nolock,udp,rsize=8192,wsize=8192 192.168.1.139:/mnt/mymusic /mnt/LS-music
		+	mount -t nfs -o rw,nolock,udp,rsize=8192,wsize=8192 192.168.1.139:/mnt/mymovies /mnt/LS-movies

	== Some experiences ==		== Some experiences ==

Kenatonline: /* Fully open to everyone (no security at all) */

Kenatonline — Fri, 08 Jan 2010 12:26:33 GMT

Fully open to everyone (no security at all)

← Older revision		Revision as of 12:26, 8 January 2010
Line 149:		Line 149:

	/etc/exports		/etc/exports
-	/mnt/mymusic *(rw)	+	/mnt/mymusic 0.0.0.0/0.0.0.0(rw)

	=== Most common usage ===		=== Most common usage ===

Kenatonline: /* Some experiences */

Kenatonline — Fri, 08 Jan 2010 12:24:51 GMT

Some experiences

← Older revision		Revision as of 12:24, 8 January 2010
Line 173:		Line 173:
	I "solved" the problem by specifying the port as option of the mount command:		I "solved" the problem by specifying the port as option of the mount command:
	mount -t nfs -o port=2049,rw 192.168.1.1:/mnt/disk1/share /mnt/LS-share		mount -t nfs -o port=2049,rw 192.168.1.1:/mnt/disk1/share /mnt/LS-share
		+
		+	[[Category:Howto]]

Kenatonline: /* Example configurations */

Kenatonline — Fri, 08 Jan 2010 12:22:50 GMT

Example configurations

← Older revision		Revision as of 12:22, 8 January 2010
Line 92:		Line 92:

	=== One directory for one machine ===		=== One directory for one machine ===
-	~~Not yet written~~.	+	/etc/hosts.deny
		+	ALL : ALL
		+
		+	/etc/hosts.allow
		+	ALL : 192.168.1.11
		+
		+	/etc/exports
		+	/mnt/mymusic 192.168.1.11(ro)
		+
		+	=== Three directories for one machine each ===
		+	/etc/hosts.deny
		+	ALL : ALL
		+
		+	/etc/hosts.allow
		+	ALL : 192.168.1.11 192.168.1.12 192.168.1.13
		+
		+	/etc/exports
		+	/mnt/mymusic 192.168.1.11(ro)
		+	/mnt/backup.12 192.168.1.12(rw)
		+	/mnt/backup.13 192.168.1.13(rw)
		+
	=== One directory for three machines ===		=== One directory for three machines ===
-	~~Not yet written~~.	+	/etc/hosts.deny
-	=== One directory for all machines in a specific subnet ===	+	ALL : ALL
-	~~Not yet written~~.	+
		+	/etc/hosts.allow
		+	ALL : 192.168.1.11 192.168.1.12 192.168.1.13
		+
		+	/etc/exports
		+	/mnt/mymusic 192.168.1.11(ro) 192.168.1.12(ro) 192.168.1.13(rw)
		+
		+	=== One directory for all machines in a specific subnet and one directory for one machine only ===
		+	/etc/hosts.deny
		+	ALL : ALL
		+
		+	/etc/hosts.allow
		+	ALL : 192.168.0.0/255.255.0.0
		+
		+	/etc/exports
		+	/mnt/mymusic 192.168.0.0/255.255.0.0(ro)
		+	/mnt/mymovies 192.168.1.13(rw)
		+
		+	Note: The configuration of /etc/hosts.allow and /etc/exports does NOT depend on each other. You can allow host access to machines which are not mentioned in /etc/exports and vice versa! It is YOUR duty to make a configuration which makes sense! Hosts not allowed to access services do NOT get access because of an entry within /etc/exports!
		+
	=== Fully open to everyone (no security at all) ===		=== Fully open to everyone (no security at all) ===
-	~~Not yet written~~.	+
		+	Allow everyone to access any service.
		+
		+	/etc/hosts.deny
		+	ALL : ALL
		+
		+	/etc/hosts.allow
		+	ALL : ALL
		+
		+	Export the directory to everyone.
		+
		+	/etc/exports
		+	/mnt/mymusic *(rw)
		+
		+	=== Most common usage ===
		+
		+	Allow the complete local network to access services.
		+
		+	/etc/hosts.deny
		+	ALL : ALL
		+
		+	/etc/hosts.allow
		+	ALL : 192.168.0.0/255.255.0.0
		+
		+	Export two directories for the PVR.
		+
		+	/etc/exports
		+	/mnt/mymusic 192.168.0.0/255.255.0.0(rw,sync,no_root_squash,no_subtree_check,insecure)
		+	/mnt/mymovies 192.168.0.0/255.255.0.0(rw,sync,no_root_squash,no_subtree_check,insecure)

	== Some experiences ==		== Some experiences ==

Kenatonline: /* What belongs to the configuration and what is it used for? */

Kenatonline — Fri, 08 Jan 2010 12:02:41 GMT

What belongs to the configuration and what is it used for?

← Older revision		Revision as of 12:02, 8 January 2010
Line 60:		Line 60:

	=== /etc/exports ===		=== /etc/exports ===
-	~~Not yet written~~.	+
		+	This file contains the information which directory is available for remote clients.
		+
		+	Each line has an identical structure.
		+
		+	First you specify the directory you want to export (Note: this means ALWAYS also ALL subdirectories).
		+	Then you specify the clients and their export options. If you have more than one client, you separate them with a space.
		+
	=== /etc/hosts.deny ===		=== /etc/hosts.deny ===
-	~~Not yet written~~.	+
		+	This file specifies which hosts you do not want to have access to your exports. (Note: this file is NOT for NFS only, but also used for all other services with the ability to provide remote access)
		+
		+	From a security point of view, you should deny access to ALL machines and explicitly allow access for the machines you trust via /etc/hosts.allow. The hosts.allow is evaluated first and whatever got allowance in hosts.allow can NOT be denied in hosts.deny later on.
		+
		+	Example /etc/hosts.deny with everything denied:
		+	ALL : ALL
		+
	=== /etc/hosts.allow ===		=== /etc/hosts.allow ===
-	~~Not yet written~~.	+
		+	This file specifies which hosts you want to allow access to your exports. (Note: this file is NOT for NFS only, but also used for all other services with the ability to provide remote access)
		+
		+	Example /etc/hosts.allow with a special handling of telnetd and sshd:
		+	ALL EXCEPT in.telnetd in.sshd : 192.168.1.0/255.255.255.0
		+	in.telnetd in.sshd : 192.168.1.11
		+
		+	This means that all machines having an IP address starting with 192.168.1. can access all services of the local machine except incoming telnetd and sshd.
		+
		+	Telnetd and sshd is remotely only available for the machine with IP address 192.168.1.11.

	== Example configurations ==		== Example configurations ==

Kenatonline: /* What belongs to "nfs-utils" and what is it used for? */

Kenatonline — Fri, 08 Jan 2010 11:38:22 GMT

What belongs to "nfs-utils" and what is it used for?

← Older revision		Revision as of 11:38, 8 January 2010
Line 29:		Line 29:
	This is the daemon which provides the access to the filesystem. It depends on the existance of the NFS filesystem mounted as "nfsd". If your kernel does not provide /proc/fs/nfsd you do not have a NFS kernel running (the opposite is not necessarily true).		This is the daemon which provides the access to the filesystem. It depends on the existance of the NFS filesystem mounted as "nfsd". If your kernel does not provide /proc/fs/nfsd you do not have a NFS kernel running (the opposite is not necessarily true).

-	~~Is nfsd not~~ running, NFS will NOT work.	+	Without a running nfsd, NFS will NOT work.

	=== mountd ===		=== mountd ===
		+
	This is the daemon which checks if a client, which requests access to a directory, is allowed to access.		This is the daemon which checks if a client, which requests access to a directory, is allowed to access.

	If mountd is not running, you will get an error message which tells you, that you have no permission to access.		If mountd is not running, you will get an error message which tells you, that you have no permission to access.

-	Without ~~mountd~~ running, NFS will NOT work.	+	Without a running mountd, NFS will NOT work.

	=== statd ===		=== statd ===
-	~~Not yet written~~.	+
		+	This is the daemon which provides fucntionality for file locking (together with the lockd daemon) and crash recovery.
		+
		+	In current implementations of the "nfs-utils", statd starts the lockd daemon when needed.
		+
		+	Without a running statd, NFS will NOT work.
		+
	=== exportfs ===		=== exportfs ===
-	~~Not yet written~~.	+
		+	This executable is used to administrate the directories which are exported via NFS during runtime.
		+
		+	If you change anything in /etc/exports you have to call exportfs to make the changes recognised by the running daemons.
		+
	=== showmount ===		=== showmount ===
-	~~Not yet written~~.	+
		+	This executable is used to query the exported directories of a NFS server. Use IP address 127.0.0.1 to query the local NFS server.

	== What belongs to the configuration and what is it used for? ==		== What belongs to the configuration and what is it used for? ==