2005-12-08 12:14:33 +00:00
|
|
|
=head1 NAME
|
|
|
|
|
2007-11-11 22:54:56 +00:00
|
|
|
fs_exportafs - Configures export of AFS to clients of other file systems
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
=for html
|
|
|
|
<div class="synopsis">
|
|
|
|
|
|
|
|
B<fs exportafs> S<<< B<-type> <I<exporter name>> >>>
|
|
|
|
S<<< [B<-start> <I<start/stop translator (on | off)>>] >>>
|
|
|
|
S<<< [B<-convert> <I<convert from afs to unix mode (on | off)>>] >>>
|
|
|
|
S<<< [B<-uidcheck> <I<run on strict 'uid check' mode (on | off)>>] >>>
|
|
|
|
S<<< [B<-submounts> <I<allow nfs mounts to subdirs of /afs/.. (on | off)>>] >>>
|
2005-12-09 14:48:56 +00:00
|
|
|
[B<-help>]
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
B<fs exp> S<<< B<-t> <I<exporter name>> >>>
|
|
|
|
S<<< [B<-st> <I<start/stop translator (on | off)>>] >>>
|
|
|
|
S<<< [B<-c> <I<convert from afs to unix mode (on | off)>>] >>>
|
|
|
|
S<<< [B<-u> <I<run on strict 'uid check' mode (on | off)>>] >>>
|
|
|
|
S<<< [B<-su> <I<allow nfs mounts to subdirs of /afs/.. (on | off)>>] >>>
|
2005-12-09 14:48:56 +00:00
|
|
|
[B<-h>]
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2006-03-01 05:02:29 +00:00
|
|
|
=for html
|
|
|
|
</div>
|
|
|
|
|
2005-12-08 12:14:33 +00:00
|
|
|
=head1 DESCRIPTION
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
The B<fs exportafs> command sets (if the B<-start> argument is provided)
|
|
|
|
or reports (if it is omitted) whether the machine can reexport the AFS
|
|
|
|
filespace to clients of a non-AFS file system. To control certain features
|
|
|
|
of the translation protocol, use the following arguments:
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=over 4
|
|
|
|
|
|
|
|
=item *
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
To control whether the UNIX group and other mode bits on an AFS file or
|
|
|
|
directory are set to match the owner mode bits when it is exported to the
|
|
|
|
non-AFS file system, use the B<-convert> argument.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=item *
|
|
|
|
|
|
|
|
To control whether tokens can be placed in a credential structure
|
|
|
|
identified by a UID that differs from the local UID of the entity that is
|
2005-12-09 14:48:56 +00:00
|
|
|
placing the tokens in the structure, use the B<-uidcheck> argument. The
|
|
|
|
most common use is to control whether issuers of the B<knfs> command can
|
|
|
|
specify a value for its B<-id> argument that does not match their local
|
|
|
|
UID on the NFS/AFS translator machine.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=item *
|
|
|
|
|
|
|
|
To control whether users can create mounts in the non-AFS filespace to an
|
2005-12-09 14:48:56 +00:00
|
|
|
AFS directory other than F</afs>, use the B<-submounts> argument.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=back
|
|
|
|
|
|
|
|
=head1 OPTIONS
|
|
|
|
|
|
|
|
=over 4
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-type> <I<exporter name>>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Names the alternate file system to which to reexport the AFS
|
2005-12-09 14:48:56 +00:00
|
|
|
filespace. The only acceptable value is C<nfs>, in lowercase letters only.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-start> on
|
|
|
|
=item B<-start> off
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Enables the local machine to reexport the AFS filespace if the value is
|
2005-12-09 14:48:56 +00:00
|
|
|
C<on>, or disables it if the value is C<off>. Omit this argument to report
|
|
|
|
the current setting for all of the configurable parameters.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-convert> on
|
|
|
|
=item B<-convert> off
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
Controls the setting of the UNIX group and other mode bits on AFS files
|
|
|
|
and directories exported to the non-AFS file system. If the value is
|
|
|
|
C<on>, they are set to match the B<owner> mode bits. If the value is
|
|
|
|
C<off>, the bits are not changed. If this argument is omitted, the default
|
|
|
|
value is C<on>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-uidcheck> on
|
|
|
|
=item B<-uidcheck> off
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Controls whether tokens can be placed in a credential structure identified
|
|
|
|
by a UID that differs from the local UID of the entity that is placing the
|
2005-12-09 14:48:56 +00:00
|
|
|
tokens in the structure.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=over 4
|
|
|
|
|
|
|
|
=item *
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
If the value is on, the UID that identifies the credential structure must
|
|
|
|
match the local UID.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
With respect to the B<knfs> command, this value means that the value of
|
|
|
|
B<-id> argument must match the issuer's local UID on the translator
|
|
|
|
machine. In practice, this setting makes it pointless to include the
|
|
|
|
B<-id> argument to the B<knfs> command, because the only acceptable value
|
|
|
|
(the issuer's local UID) is already used when the B<-id> argument is
|
|
|
|
omitted.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
Enabling UID checking also makes it impossible to issue the B<klog> and
|
|
|
|
B<pagsh> commands on a client machine of the non-AFS file system even
|
|
|
|
though it is a system type supported by AFS. For an explanation, see
|
|
|
|
L<klog(1)>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=item *
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
If the value is off (the default), tokens can be assigned to a local UID
|
|
|
|
in the non-AFS file system that does not match the local UID of the entity
|
|
|
|
assigning the tokens.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
With respect to the B<knfs> command, it means that the issuer can use the
|
|
|
|
B<-id> argument to assign tokens to a local UID on the NFS client machine
|
|
|
|
that does not match his or her local UID on the translator machine. (An
|
|
|
|
example is assigning tokens to the MFS client machine's local superuser
|
|
|
|
C<root>.) This setting allows more than one issuer of the B<knfs> command
|
|
|
|
to make tokens available to the same user on the NFS client machine. Each
|
|
|
|
time a different user issues the B<knfs> command with the same value for
|
|
|
|
the B<-id> argument, that user's tokens overwrite the existing ones. This
|
|
|
|
can result in unpredictable access for the user on the NFS client machine.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=back
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-submounts> on
|
|
|
|
=item B<-submounts> off
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Controls whether a user of the non-AFS filesystem can mount any directory
|
2005-12-09 14:48:56 +00:00
|
|
|
in the AFS filespace other than the top-level F</afs> directory. If the
|
|
|
|
value is C<on>, such submounts are allowed. If the value is C<off>, only
|
|
|
|
mounts of the F</afs> directory are allowed. If this argument is omitted,
|
|
|
|
the default value is C<off>.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
=item B<-help>
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
Prints the online help for this command. All other valid options are
|
|
|
|
ignored.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
=back
|
|
|
|
|
|
|
|
=head1 OUTPUT
|
|
|
|
|
|
|
|
If the machine is not even configured as a server of the non-AFS file
|
|
|
|
system, the following message appears:
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
Sorry, the <file_system>-exporter type is currently not supported on
|
2005-12-08 12:14:33 +00:00
|
|
|
this AFS client
|
|
|
|
|
|
|
|
If the machine is configured as a server of the non-AFS file system but is
|
|
|
|
not currently enabled to reexport AFS to it (because the B<-start>
|
2005-12-09 14:48:56 +00:00
|
|
|
argument to this command is not set to C<on>), the message is as follows:
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
'<file_system>' translator is disabled
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
If the machine is enabled to reexport AFS, the following message precedes
|
|
|
|
messages that report the settings of the other parameters.
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
'<file_system>' translator is enabled with the following options:
|
2005-12-08 12:14:33 +00:00
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
The following messages indicate that the B<-convert> argument is set to
|
|
|
|
C<on> or C<off> respectively:
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Running in convert owner mode bits to world/other mode
|
|
|
|
Running in strict unix mode
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
The following messages indicate that the B<-uidcheck> argument is set to
|
|
|
|
C<on> or C<off> respectively:
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Running in strict 'passwd sync' mode
|
|
|
|
Running in no 'passwd sync' mode
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
The following messages indicate that the B<-submounts> argument is set to
|
|
|
|
C<on> or C<off> respectively:
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
Allow mounts of /afs/.. subdirs
|
|
|
|
Only mounts to /afs allowed
|
|
|
|
|
|
|
|
=head1 EXAMPLES
|
|
|
|
|
|
|
|
The following example shows that the local machine can export AFS to NFS
|
|
|
|
client machines.
|
|
|
|
|
|
|
|
% fs exportafs nfs
|
|
|
|
'nfs' translator is enabled with the following options:
|
|
|
|
Running in convert owner mode bits to world/other mode
|
|
|
|
Running in no 'passwd sync' mode
|
|
|
|
Only mounts to /afs allowed
|
|
|
|
|
2005-12-09 14:48:56 +00:00
|
|
|
The following example enables the machine as an NFS server and converts
|
|
|
|
the UNIX group and other mode bits on exported AFS directories and files
|
|
|
|
to match the UNIX owner mode bits.
|
2005-12-08 12:14:33 +00:00
|
|
|
|
|
|
|
% fs exportafs -type nfs -start on -convert on
|
|
|
|
|
|
|
|
The following example disables the machine from reexporting AFS to NFS
|
|
|
|
client machines:
|
|
|
|
|
|
|
|
% fs exportafs -type nfs -start off
|
|
|
|
|
|
|
|
=head1 PRIVILEGE REQUIRED
|
|
|
|
|
|
|
|
The issuer must be logged in as the local superuser root.
|
|
|
|
|
|
|
|
=head1 SEE ALSO
|
|
|
|
|
|
|
|
L<klog(1)>,
|
|
|
|
L<knfs(1)>
|
|
|
|
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
|
|
|
|
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
|
|
|
|
|
|
|
|
This documentation is covered by the IBM Public License Version 1.0. It was
|
|
|
|
converted from HTML to POD by software written by Chas Williams and Russ
|
|
|
|
Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
|