Re: Use LDAP netgroup to control NFS exports?

To: jupiter <jupiter.hce@gmail.com>

Subject: Re: Use LDAP netgroup to control NFS exports?

From: Vishesh kumar <linuxtovishesh@gmail.com>

Date: Mon, 6 May 2013 16:02:46 +0530

Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=z+QTbNuJx8aylYTaEkTDA0dJ1bwlpw4aC1tIqhWqzy8=; b=dS4dtN3oka6LNjx8XbJUM2Ofe7J3n0YVpdGArNzUZ3fXd5xmubq6NH3O/MYjFbdt32 d/eUvncy3pWXmfqzzresu18DIzWlwvwMMSDoEutvGhjsXeZij7i3FTgC+p6BbZZtozhX YXdZW3B7yo5BHXmllRANHAPQNMkm4AvUcrDp0Q/AlNXj14vZq0KxYI5B4r5c7cd7nTRx vmtZz99Ay9fLVOqucFYhYuYVJh2qUd/8ZymUMYL0RTxRJmmmgsmk7WmCGxyzVXAdpnN7 koDWqfuu1Mq2/nxAW3GguYrKgS3ZnUlWLlCx5tBYgN58H/kYi0X0EQIepWBrIjpECsPu cG5w==

In-reply-to: <CAA=hcWRLZTnW7Bm-Q91M-Qny4rY6F6R5tDdwhXMLfGKmOtVpxQ@mail.gmail.com>

References: <CAA=hcWRLZTnW7Bm-Q91M-Qny4rY6F6R5tDdwhXMLfGKmOtVpxQ@mail.gmail.com>

Hello Jupitor,

What I know is NFS4 implementation where user/group based ACL can be applied. Not sure if NFS3 support other than host based ACL.

Thanks

Vishesh Kumar

http://linuxmantra.com

On Thu, May 2, 2013 at 6:24 PM, jupiter <jupiter.hce@gmail.com> wrote:

Hi,

I am running LDAP server and NFS server on CentOS 6, is it true that
LDAP can be used to control NFS exports authentication, uid and gid
setting without needing to specifie client IP addresses , anonuid and
anongid on NFS exports file?

I saw some sample such as to define "/tmp/nfs2
@mynetgrp(rw,no_root_squash)" to exports file, it seems to me, you can
add new user with IP address to LDAP entry anytine without updating
exports file in NFS server?

If it is correct, has the netgroup schema already been defined in
/etc/openldap/schema? Could anyone kindly point me a link for document
or howto for the setting in both LDAP and NFS exports?

Thank you.

Kind regards.

Jupiter