145
The DFS/NFS Secure Gateway
Configuring Gateway Server Machines
3 Export the DCE global root directory, /..., via NFS. This is typically
accomplished via the exportfs command; the exact command and procedure
depends on your vendor’s implementation of NFS. (See your vendor’s NFS
documentation for more information.)
The Gateway Server machine is now configured to provide DCE
authentication via only the dfsgw add command. Repeat these steps on each
DFS client that is to be configured as a Gateway Server in this manner.
Should you later decide to allow users to authenticate to DCE from NFS
clients that contact the Gateway Server, simply perform the steps in
“Configuring a Gateway Server and Enabling Remote Authentication” on
the Gateway Server machine.
Configuring a Gateway Server and Enabling Remote
Authentication
Perform the steps in this section to enable DCE authentication either from a
Gateway Server machine or from NFS clients that contact the Gateway
Server. Users authenticate from the Gateway Server machine by issuing the
dfsgw add command; they authenticate from an NFS client by issuing the
dfs_login command. A Gateway Server machine to be configured in this
manner runs the Gateway Server (dfsgwd) process. The steps in
“Configuring the Gateway Server Process” configure the dfsgwd process on
the Gateway Server machine.
A Gateway Server machine configured in this way should also run the Basic
OverSeer (BOS) Server to monitor and simplify administration of the
dfsgwd process. The steps in “Configuring the BOS Server Process”
configure a BOS Server (bosserver) process on the Gateway Server
machine. Perform the steps in “Configuring the BOS Server Process” only if
the BOS Server is not already running on the machine. (Note that you
typically run the BOS Server only on DFSservers, but you can also run it on
DFS clients.)
To Next Page
Loading...
