Zfs sharenfs and host restriction

Hello guys/gals,
i've been googling/searching Sun forums for a half a day now and still can't figure out my problem. I have a simple task at hand where i need to export and zfs volume via NFS to a particular host. I want to make sure that this is the only host that can connect to this export. So my syntax is:
zfs set sharenfs=rw=192.168.1.30 tank/accounting
so now i am going to my linux host (192.168.1.30) and try to mount the export:
mount 192.168.1.20:/tank/accounting /accounting
mount: 192.168.1.20:/tank/accounting /accounting failed, reason given by server: Permission denied
If i simply run:
zfs set sharenfs=on tank/accounting
it works fine, i count mount export ok.
While one the linux client i can run "showmount -e 192.168.1.20" and can see my export listed just fine.
/tank/accounting
What am i doing wrong ?
Thanks a bunch

Hi,
you can try
# zfs set sharenfs='[email protected]/32' tank/accounting
but if you have multiple host, they would all herit the root options -rw !
A better way is
# zfs set sharenfs='[email protected]/32,[email protected]/32' tank/accounting
It must be mentioned twice.
'root' just means that root access does not translate to an anonymous access (user nobody), as you can add as many hosts you want -just seperated with a comma.
# zfs set sharenfs='[email protected]/32,[email protected]/32,[email protected]/32' tank/accounting
so the 2 IPs get rw/ro access and for IP 30 the mapping root->nobody does not happen.
hope this helps
kind regards,
m
Edited by: m.com on May 21, 2009 9:35 AM

Similar Messages

ZFS 7320c and T4-2 server mount points for NFS

Hi All,
We have an Oracle ZFS 7320c and T4-2 servers. Apart from the on-board 1 GB Ethernet, we also have a 10 Gbe connectivity between the servers and the storage
configured as 10.0.0.0/16 network.
We have created a few NFS shares but unable to mount them automatically after reboot inside Oracle VM Server for SPARC guest domains.
The following document helped us in configuration:
Configure and Mount NFS shares from SUN ZFS Storage 7320 for SPARC SuperCluster [ID 1503867.1]
However, we can manually mount the file systems after reaching run level 3.
The NFS mount points are /orabackup and /stage and the entries in /etc/vfstab are as follows:
10.0.0.50:/export/orabackup - /orabackup nfs - yes rw,bg,hard,nointr,rsize=131072,wsize=131072,proto=tcp,vers=3
10.0.0.50:/export/stage - /stage nfs - yes rw,bg,hard,nointr,rsize=131072,wsize=131072,proto=tcp,vers=3
On the ZFS storage, the following are the properties for shares:
zfsctrl1:shares> select nfs_prj1
zfsctrl1:shares nfs_prj1> show
Properties:
aclinherit = restricted
aclmode = discard
atime = true
checksum = fletcher4
compression = off
dedup = false
compressratio = 100
copies = 1
creation = Sun Jan 27 2013 11:17:17 GMT+0000 (UTC)
logbias = latency
mountpoint = /export
quota = 0
readonly = false
recordsize = 128K
reservation = 0
rstchown = true
secondarycache = all
nbmand = false
sharesmb = off
sharenfs = on
snapdir = hidden
vscan = false
sharedav = off
shareftp = off
sharesftp = off
sharetftp =
pool = oocep_pool
canonical_name = oocep_pool/local/nfs_prj1
default_group = other
default_permissions = 700
default_sparse = false
default_user = nobody
default_volblocksize = 8K
default_volsize = 0
exported = true
nodestroy = false
space_data = 43.2G
space_unused_res = 0
space_unused_res_shares = 0
space_snapshots = 0
space_available = 3.97T
space_total = 43.2G
origin =
Shares:
Filesystems:
NAME SIZE MOUNTPOINT
orabackup 31K /export/orabackup
stage 43.2G /export/stage
Children:
groups => View per-group usage and manage group
quotas
replication => Manage remote replication
snapshots => Manage snapshots
users => View per-user usage and manage user quotas
zfsctrl1:shares nfs_prj1> select orabackup
zfsctrl1:shares nfs_prj1/orabackup> show
Properties:
aclinherit = restricted (inherited)
aclmode = discard (inherited)
atime = true (inherited)
casesensitivity = mixed
checksum = fletcher4 (inherited)
compression = off (inherited)
dedup = false (inherited)
compressratio = 100
copies = 1 (inherited)
creation = Sun Jan 27 2013 11:17:46 GMT+0000 (UTC)
logbias = latency (inherited)
mountpoint = /export/orabackup (inherited)
normalization = none
quota = 200G
quota_snap = true
readonly = false (inherited)
recordsize = 128K (inherited)
reservation = 0
reservation_snap = true
rstchown = true (inherited)
secondarycache = all (inherited)
shadow = none
nbmand = false (inherited)
sharesmb = off (inherited)
sharenfs = sec=sys,rw,[email protected]/16:@10.0.0.218/16:@10.0.0.215/16:@10.0.0.212/16:@10.0.0.209/16:@10.0.0.206/16:@10.0.0.13/16:@10.0.0.200/16:@10.0.0.203/16
snapdir = hidden (inherited)
utf8only = true
vscan = false (inherited)
sharedav = off (inherited)
shareftp = off (inherited)
sharesftp = off (inherited)
sharetftp = (inherited)
pool = oocep_pool
canonical_name = oocep_pool/local/nfs_prj1/orabackup
exported = true (inherited)
nodestroy = false
space_data = 31K
space_unused_res = 0
space_snapshots = 0
space_available = 200G
space_total = 31K
root_group = other
root_permissions = 700
root_user = nobody
origin =
zfsctrl1:shares nfs_prj1> select stage
zfsctrl1:shares nfs_prj1/stage> show
Properties:
aclinherit = restricted (inherited)
aclmode = discard (inherited)
atime = true (inherited)
casesensitivity = mixed
checksum = fletcher4 (inherited)
compression = off (inherited)
dedup = false (inherited)
compressratio = 100
copies = 1 (inherited)
creation = Tue Feb 12 2013 11:28:27 GMT+0000 (UTC)
logbias = latency (inherited)
mountpoint = /export/stage (inherited)
normalization = none
quota = 100G
quota_snap = true
readonly = false (inherited)
recordsize = 128K (inherited)
reservation = 0
reservation_snap = true
rstchown = true (inherited)
secondarycache = all (inherited)
shadow = none
nbmand = false (inherited)
sharesmb = off (inherited)
sharenfs = sec=sys,rw,[email protected]/16:@10.0.0.218/16:@10.0.0.215/16:@10.0.0.212/16:@10.0.0.209/16:@10.0.0.206/16:@10.0.0.203/16:@10.0.0.200/16
snapdir = hidden (inherited)
utf8only = true
vscan = false (inherited)
sharedav = off (inherited)
shareftp = off (inherited)
sharesftp = off (inherited)
sharetftp = (inherited)
pool = oocep_pool
canonical_name = oocep_pool/local/nfs_prj1/stage
exported = true (inherited)
nodestroy = false
space_data = 43.2G
space_unused_res = 0
space_snapshots = 0
space_available = 56.8G
space_total = 43.2G
root_group = root
root_permissions = 755
root_user = root
origin =
Can anybody please help?
Regards.

try this:
svcadm enable nfs/clientcheers
bjoern

Is possible to purchase the program and host it on our own server?

Is possible to purchase the program and host it on our own server?

Like so many questions, the answer is: yes... maybe.
Mac OS X Server includes a web server, so it's entirely possible (trivial, even) to create a web site on your server.
Making it available to the outside world depends a little bit on your network connection - you'll probably need to tweak your router/firewall configuration to let external connections into your server.
Then you also need to consider your network speed - remote users will be limited to the upload speed of your link - if you're on a residential link that might not be all that fast. In addition, many large ISPs restrict the running of servers on residential connections (you don't say whether your server is located on a business or residential link).
Beyond that, though there are various back-end technologies that you can use to add dynamic elements to your pages (so they're not just static HTML pages). Things like PHP, Perl, Ruby, Python and more are built in, as is MySQL if you want a databased-driven site. Some technologies are not supported, though, such as ASP. Therefore you might need to consider what dynamic content system (if any) you want to run.

Daemons for hosts.allow and hosts.deny?

I want to use hosts.allow and hosts.deny to restrict access to my servers, but I'm not sure what daemons to use in the config files for services like remote desktop or server admin. Is there any way to specify those services? Can you do it with port numbers instead of service names (man 5 hosts_access wasn't very clear to me).
For services like http and ssh, its a no-brainer, but I can't figure out the Apple specific stuff.
Thanks,
Miles
11 G4 XServes... Mac OS X (10.4.5)

If you are referring to the python script, "denyhosts" that works in conjunction with xinetd, this simply works under 10.3.x, I've used it once successfully. It needs to be configured correctly, but it does work. Did not try it with 10.4, but...
the far better option is described by Leland.

What are the userid,password, and host name for oracle 9i?

HI Guys.
I am a research student at the University and the I recently downloaded Oracle 9i for my research. But the problems is also with seting it up. Please could you show me the userid, password, and host name for oracle 9i.
Thanks in advance for your cooperations.
Malinga R
[email protected]

I believe that starting with 9.2, you have to specify different passwords when you install (can't be the default).
Justin

My iPad 2 doesn't have the app store I have looked in everything, reset the home screen and the restrictions is off but I still can't find it.

My iPad 2 doesn't have the app store I have looked in everything, reset the home screen and the restrictions is off but I still can't find it.

If you got the iPad from your school, and the Installing Apps restriction is 'off' but greyed out (as you 've said here https://discussions.apple.com/message/16137325#16137325) so that the App Store app is hidden, then it's likely that your school has set the restriction - you will need to ask them to remove the restriction for you.

Question about Domain and Host name fields.

Hello! Just a quick question, I currently have the Mail Server up and running although I'm a little unsure about what exactly needs to be entered into the users email application.
I've tested POP and IMAP using the information that I entered into the "Domain Name" field, and into the "Host name" field, and everything worked great.
Example:
Incoming Mail Server: mail.example.com
Outgoing Mail Server: smtp.example.com
Although while setting up another site and including the normal mail setup via DNS I've also noticed that I can send and receive email by using other sites that belong to me, as long as they are pointing towards our server.
Example:
Incoming Mail Server: mail.mynewsite.com
Outgoing Mail Server: smtp.mynewsite.com
So, I guess my question is whether its bad to use other websites in the incoming and outgoing mail server fields, or should I stick to the incoming and outgoing sites that I have listed in the Mail Server's 'Domain Name' and 'Host Name' fields?
I hope that made sense, thanks again for your help.
Paul
PowerMac G5, Xserve G5, and PowerBook G4 Mac OS X (10.4.8)

Does it matter if our users type mail.example.com
into the incoming mail server, or are they allowed to
use their own domain name "mail.mydomain.com" as long
as the DNS is setup correctly?
There is no intrinsic 'meaning' to hostnames entered into the mail client. These are merely converted to IP addresses, using available dns, and then the mail client communicates with the IP address, using whatever port number is applicable for the service required (e.g., port 25 for smtp, port 110 for pop). So you could use the hostname woohooo.mydomain.com for the smtp or pop server, as long as it resolves to the correct IP.
This enables laptop users to have the one smtp/pop hostname, with lan dns resolving it to the local private IP and ext dns resolving same hostname to wan IP.
There is also no need to have two separate hostnames for pop and smtp. These are typically used by ISPs because they have separate servers doing each job - one doing pop, one doing smtp. If one server does both (and there is no likelihood of splitting the services later) then just the one hostname for pop and smtp is fine.
-david

Password and host string

Hi,
Im trying to get the Oracle 8i for 2000 to run correctly. I did a download. Problem is getting pass the password screen. The host string is giving me trouble. What should go there? Any place where the password and host string info are stored for later retrieval?
thanks,
Cindy

If you installed the default database then you should type in system as the user and manager for the password and ORCL as the host string (these are the defaults).
The hoststring names (database aliases) would be in the tnsnames.ora file uder your Oracle_Home/network/admin directory
If you login as system or a user that has DBA privileges, you can change passwords as you see fit
syntax:
alter user identified by somepassword;

Saving to PDF using VBA in Excel 2007 using security features such as password and print restriction

Good Afternoon,
I am wondering if there is a way to implement the security features such as password and print restriction while saving a document to PDF using VBA in Excel 2007.
Regards,
Steve

Bill,
Thank you. I was able to find the security setting section. The problem I have now, however, is writing the VBA to save to PDF and incorporate the security settings. I thought if i applied the settings to the Excel document I was working on it would carry over, but this does not seem to be the case. Any idea's?
Regards,
Steve

UNABLE TO RETRIEVE THE CLIENT IP ADDRESS AND HOST NAME OF A PORTAL USER

I'm trying to retrive the client IP address and host name of a portal user
trying to access a portal page using APIs:
PortletRenderRequest portletRequest =
(PortletRenderRequest)request.getAttribute(HttpCommonConstants.PORTLET_RENDER_REQUEST);
HttpServletRequest servletRequest =
(HttpServletRequest)portletRequest.getAttribute(HttpCommonConstants.SERVLET_REQUEST);
String l_szClientIPAddress = servletRequest.getRemoteAddr();
String l_szClientHost = servletRequest.getRemoteHost();
but i found that for all portal users on different machines IP addresses, the
returned IP is the same for all which is Portal middle tier IP address.
So how can retrive the IP addess of a portal user trying to access a portal
page ?

Brijesh,
Do you mean how to see hostname/ip address of client requests processed by the server? If yes, depending on what's your front ending component - Web Cache or OHS, you can configure the access log format to have this information recorded in either of these component's access log file.
For Web Cache access log file, refer this:
http://download.oracle.com/docs/cd/B14099_19/caching.1012/b14046/diagnostics.htm#sthref2090
For OHS access log file, refer this:
http://download.oracle.com/docs/cd/B14099_19/web.1012/b14007/servlog.htm#sthref439
By default, both Web Cache and OHS are configured to use Common Log Format (CLF) that does record hostname/ip address so if you haven't made any changes to log format, this info is already there for you. Look for $ORACLE_HOME/webcache/logs/access_log file for Web Cache and $ORACLE_HOME/Apache/Apache/logs/access_log file for OHS.
Thanks
Shail

Problem with external domain name and hosting

Hi I have my own domain name and hosting plan I want to use. However, I have trouble pointing my site from BC to my server.
I found the following information but in my case "create A-Records" is not available on the "Site Domains". Please advise.
Thanks.
Bonbon668
Point externally hosted domains to your Business Catalyst site
If you have chosen to use external DNS service for your domain name, create A-Records for both the www and non-www versions of your domain name. Then, point them to your site, which resides on one of the following IP addresses:

Hi
Can you please confirm that there is no “Create A records” option under “More Actions” ?

Why can't I make a kik account? I have IOS6 and higher and my restrictions are turned off! Please help!

Why can't I make a kik account? I have IOS6 and higher and my restrictions are turned off! Please help!

What happens when you try?
See:
iOS: An app you installed unexpectedly quits, stops responding, or won’t open
Contact the developer/go to their support site
https://kikinteractive.zendesk.com/home
Restore from backup. See:
iOS: How to back up
Restore to factory settings/new iPod

I want to make a new site in dreamweaver and host it on business cstalyst

I want to make a NEW site in Dreamweaver CC and host it on the Business Catalyst platform.But it seems the only way to use dreamweaver in business Catalyst is to import a BC template into Dreamweaver then upload it to BC. I want to create an original site and use the BC platform, is that possible? This seems like it should be simple and automatic, even encouraged. But as of now the only way to create an original site is to use Adobe Muse. Which is weird, seems like Adobe missed this one somewhere...

I don't think you understand: I want to open Dreamweaver and build a brand new site, then when I am done I want to host the dreamweaver site on the Business Catalyst platform. I dont want to use anything in BC to build the site, I just want to use the hosting platform. I do not want to import a BC site into dreamweaver or anything like that. I just want to use BC the same way I would use godaddy, or uhost or any other hosting provider. Based on your response you said that "of course its possible to build a BC site in Dreamweaver" I dont want to build a BC site, I want to build a Dreamweaver site and host it on the BC platform. Like I said before it doesnt seem like this is possible. As of now we can only build a new site in MUSE and integrate it into BC without using a BC template. Can you understand what I am saying. I DONT WANT TO USE A BC TEMPLATE, I WANT NOTHING TO DO WITH BC WHILE I AM BUILDING THE SITE WITH DREAMWEAVER, JUST LIKE MUSE DOES.

My website created with Iweb and hosted on mobileMe is not showing well on all computers. What could be the problem ?

My website created with Iweb and hosted on mobileMe is not uploading well on all computers. What could be the problem ?

I got a chance to look at it on a PC. Totally hosed up. It loads incorrectly then parts of it go blank.
I have a site that is based very much on one of the built-in templates and it works fine on the same PC. It contains only text boxes, image placeholders, and images with "picture frame" borders. Nothing fancy, no overlays, no extra code or anything. I haven't looked much at the other templates so I don't know if yours is mostly a template or how much you may have modified one or what tricks you may have done to get the look you wanted. Whatever it is, IE does not like it. Unfortunately, you can't really ignore them as was suggested; they make up a large part of your audience.

Restrictive and non-restrictive procedures!

Hi all,
Wanted to knwo what are restrictive and non-restrictive procedures in oracle forms.
Thanks and Regards

I think where Frank said "one-time triggers" he meant "non_repeating TIMERS".
Here is an alternative way to get around the restricted built-in problem which does not seem to be widely known:
Create two numeric control fields, say TRIGGERING_FIELD and TRIGGERED_FIELD.
TRIGGERED_FIELD has a formula calculation property of
MY_FUNCTION(:TRIGGERING_FIELD)
MY_FUNCTION is created in the form program units and can do anything you want, including restricted built-ins. The value it actually returns is irrelevant (although you could use it as a return code if you want).
Then all you need to do is modify the value of TRIGGERING_FIELD (perhaps multiply it by -1 ) which you can do in a trigger that does not allow restricted built-ins. The calculation will see that its input parameter has changed and will recalculate, thus running the function and doing all the restricted stuff.

Zfs sharenfs and host restriction

Similar Messages

Maybe you are looking for