HP Visualize J5000 hp enterprise file system: planning and configuring hp DCE/ - Page 151
Configuring a Client Without Enabling Remote Authentication
View all HP Visualize J5000 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 151 highlights
The DFS/NFS Secure Gateway Configuring Gateway Server Machines Depending on how you configured your Gateway Server machines, configure each NFS client that is to provide access to DFS in one of the following ways: • If you configured your Gateway Servers so that users cannot issue the dfs_login command to authenticate to DCE, configure your NFS clients without enabling DCE authentication via the dfs_login command; follow the instructions in "Configuring a Client Without Enabling Remote Authentication." • If you configured your Gateway Servers so that users can issue the dfs_login command to authenticate to DCE, configure your NFS clients and enable DCE authentication via the dfs_login command; follow the instructions in "Configuring a Client and Enabling Remote Authentication." Because the steps in each of these sections mount /... on an NFS client, users who do not have DCE accounts can still use the NFS client for unauthenticated access to DFS. (See "Unauthenticated Access to DFS" for more information about unauthenticated access; see "Authenticated Access to DFS" for more information about authenticated access.) Configuring a Client Without Enabling Remote Authentication If you configured your Gateway Server machines so that users cannot issue the dfs_login command to authenticate to DCE, perform the steps in this section to configure your NFS clients. The steps enable DFS access from an NFS client without enabling DCE authentication from the client. Users can authenticate only via the dfsgw add command. To provide users of an NFS client with access to DFS but not the dfs_login command, perform the following steps on the client: 1 Log in as the local root user on the machine. 2 Mount the root of the DCE namespace, /..., on the machine. In the command, hostname is the hostname of a machine that exports /.... Each machine configured as a Gateway Server exports /.... When users access DFS from an NFS client, they go through the Gateway Server machine that exports /... to the client. To achieve proper load balancing if you configure multiple Gateway Server machines, ensure that the mounts of /... on your NFS clients are divided evenly among your Gateway Servers. (You can use the NFS automount mechanism with a direct automount map to mount /...; see your vendor's NFS documentation for more information.) 151