Share and Project Protocols
hostname:shares default> set sharenfs="rw,euc-kr=*"
Will share the filesystem with 'euc-kr' as the default encoding. The following:
hostname:shares default> set sharenfs="rw,euc-kr=host1.domain.com,euc-jp=host2.domain.
com"
Use the default encoding for all clients except 'host1' and 'host2', which will use 'euc-kr' and
'euc-jp', respectively. The format of the host lists follows that of other CLI NFS options.
Note that some NFS clients do not correctly support alternate locales; consult your NFS client
documentation for details.
NFS Protocol Security Modes
Security modes are set on a per-share basis. The following list describes Kerberos security
settings:
■
krb - End-user authentication through Kerberos V5
■
krb5i - krb5 plus integrity protection (data packets are tamper proof
■
krb5p - krb5i plus privacy protection (data packets are tamper proof and encrypted)
Security modes are specified by appending text in the form "option=mode" where option is sec
and mode is the security setting. For example:
hostname: shares default> set sharenfs="sec=krb5"
Note - CLI property values that contain the "=" character must be quoted.
Combinations of Kerberos types can be specified in the security mode setting. The combination
security modes let clients mount with any Kerberos type listed, as shown in the following table.
TABLE 110
Combinations of Kerberos types
Setting Description
sys System Authentication
krb5 Kerberos v5 only - Clients must mount using this flavor.
krb5:krb5i Kerberos v5, with integrity - Clients may mount using any flavor listed.
krb5i Kerberos v5 integrity only - Clients must mount using this flavor.
krb5:krb5i:krb5p Kerberos v5, with integrity or privacy - Clients may mount using any flavor listed.
krb5p Kerberos v5 privacy only - Clients may mount using this flavor.
408 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016
To Next Page
Loading...
Need help?
General