Attachment uploads are currently disabled. This is a temporary situation and will resume as normal in the coming days.
UNSOLVED
NFS export hiding
Hi,
the PowerShell OneFS Seurity Configuration Guide 9.2.0.0 explains how to hide nfs exports from unauthorized hosts. I did the following:
isi_gconfig registry.Services.lwio.Parameters.Drivers.nfs.MountdDeniedStatusOnNotAllowed=1
isi_for_array /usr/likewise/bin/lwsm restart onefs_nfs
But every host, allowed or not, can still view the whole exports list with "showmount -e". I can only disable the showmount command, but then even the authorized hosts cannot see the export status.
What am I doing wrong?
Dirk
Hi,
no, it's not about the client configuration. I'm talking aubout the manual "PowerScale OneFS: Security Configuration Guide 9.2.0.0.". On page 59 under "NFS best practices" and "Enable export hiding" it says, that you can set the system variable registry.Services.lwio.Parameters.Drivers.nfs.MountdDeniedStatusOnNotAllowed=1 to hide the exports from unauthorized hosts. I did set the variable and restarted the nfs service, but all clients can still view the exports with "showmount -e".
DELL-Sam L
Community Manager
•
8095 Posts
•
34547 Points
913
0
Posted October 19th, 2021 15:00
Hello dirkuos,
You are going to need to open a support case so that we can look at the logs to see why it is not hiding the exports.
DELL-Sam L
Community Manager
•
8095 Posts
•
34547 Points
1019
0
Posted October 4th, 2021 13:00
Hello dirkuos,
Are you using OneFS: Best practices for NFS client settings? Here is a link to the kb if you need it. https://dell.to/3a6WI8G