Configuring Services
■
Mount visibility - This property lets you limit the availability of information about share
access lists and remote mounts from NFS clients. Full allows full access. Restricted restricts
access such that a client can see only the shares which it is allowed to access. A client
cannot see access lists for shares defined at the server or remote mounts from the server
done by other clients. The property is set to Full by default.
■
Enable Kerberos - Enables/disables Kerberos service.
■
Allow weak encryption types in Kerberos - Enables/disables support for DES (des-cbc-
crc, des-cbc-md5) and Exportable ArcFour with HMAC/md5 (arcfour-hmac-exp). This
property is disabled by default.
■
Kerberos realm - A realm is logical network, similar to a domain, that defines a group
of systems that are under the same master KDC. Realm names can consist of any ASCII
string. Usually, your realm name is the same as your DNS domain name, except that the
realm name is in uppercase. Using this convention helps you differentiate problems with
the Kerberos service from problems with the DNS namespace, while still using a name
that is familiar.
■
Kerberos master KDC - In each realm, you must include a server that maintains the
master copy of the principal database. The most significant difference between a master
KDC and a slave KDC is that only the master KDC handles database administration
requests. For instance, you must change a password or add a new principal on the master
KDC.
■
Kerberos slave KDC - The slave contains duplicate copies of the principal database.
Both the master KDC server and the slave KDC server create tickets that are used to
establish authentication.
■
Kerberos admin principal - This property identifies the administrator. By convention,
a principal name is divided into three components: the primary, the instance, and the
realm. You can specify a principal as joe, joe/admin, or joe/admin@ENG.EXAMPLE.COM.
This property is used only to set up the system's Kerberos service principals and is not
retained.
■
Kerberos admin password - Defines a password for the administrator. This property is
used only to set up the system's Kerberos service principals and is not retained.
■
Oracle Intelligent Storage Protocol - The NFSv4 service includes support for the Oracle
Intelligent Storage Protocol, which lets Oracle Database NFSv4 clients pass optimization
information to the ZFS Storage Appliance NFSv4 server. For more information, see “Oracle
Intelligent Storage Protocol” on page 644.
Related Topics
■
“NFS Properties” on page 241
■
Setting Service Properties BUI, CLI.
Appliance Services 239
To Next Page
Loading...
Need help?
General
