|
NFS mount SERVER (192.168.1.182) Make sure nfs is running on the server $ /etc/init.d/nfs restart At the server the contents of /etc/exports for allowing 2 computers (192.168.1.171 and 192.168.1.71) to access the home directory of this server. Note that read write (rw) access is allowed. $ cat /etc/exports /home 192.168.1.171(rw) /home 192.168.1.71(rw) Or, if you have a lot of clients on 192.168.1.* then consider the following: /home 192.168.1.0/255.255.252.0(rw) Next, still at the server, run the exportfs command $ exportfs -rv IPTABLES (lokkit). If you're using fedora with default lokkit firewall then you can put the following under "Other ports". Other ports nfs:tcp nfs:udp If the above does not work or you are not using lokkit IPTABLES (values in /etc/sysconfig/iptables on SERVER ) # NFS Need to accept fragmented packets and may not have header # so you will not know where they are coming from -A INPUT -f -j ACCEPT -A INPUT -p tcp -m tcp -s 192.168.1.171 -m multiport --dports 111,683,686,685,1026,2049,2219 -j ACCEPT -A INPUT -p tcp -s 192.168.1.171 -d 0/0 --dport 32765:32768 -j ACCEPT -A INPUT -p udp -m udp -s 192.168.1.171 -m multiport --dports 111,683,686,685,1026,2049,2219 -j ACCEPT -A INPUT -p udp -s 192.168.1.171 -d 0/0 --dport 32765:32768 -j ACCEPT -A INPUT -f -j ACCEPT -A INPUT -p tcp -m tcp -s 192.168.1.71 -m multiport --dports 111,683,686,685,1026,2049,2219 -j ACCEPT -A INPUT -p tcp -s 192.168.1.71 -d 0/0 --dport 32765:32768 -j ACCEPT -A INPUT -p udp -m udp -s 192.168.1.71 -m multiport --dports 111,683,686,685,1026,2049,2219 -j ACCEPT -A INPUT -p udp -s 192.168.1.71 -d 0/0 --dport 32765:32768 -j ACCEPT (Reference: http://nfs.sourceforge.net/nfs-howto/server.html) and (Reference: http://nfs.sourceforge.net/nfs-howto/security.html) CLIENT1 (192.168.1.171) $ mkdir -p /home2 $ cat /etc/fstab 192.168.1.182:/home /home2 nfs rw 0 0 $ mount -a -t nfs Or to do a one time mounting by hand $ mount -t nfs 192.168.1.182:/home /home2 Now /home2 on the client will be /home on the server Reference: http://nfs.sourceforge.net/nfs-howto/index.html MONITOR NFS: To monitor the client: $ nfsstat -c Also note you can "cat /proc/net/rpc/nfs" as well. To monitor the server (note the -s instead of the -c). $ nfsstat -s Also note you can "cat /proc/net/rpc/nfsd" as well. The following "cat" command is done on the NFS server, and shows which clients are mounting. This does not go with examples above. By the way, "root_squash" is the default, and means that root access on the clients is denied. So, how does the client root get access to these filesystems? You have to "su - <someuser>". $ cat /proc/fs/nfs/exports # Version 1.1 # Path Client(Flags) # IPs /home 192.168.1.102(rw,root_squash,sync,wdelay) /home squeezel.squeezel.com(rw,root_squash,sync,wdelay) /home 192.168.1.106(rw,root_squash,sync,wdelay) /home livingroom.squeezel.com(rw,root_squash,sync,wdelay) /home 10.8.0.1(rw,root_squash,sync,wdelay) /home closet.squeezel.com(rw,root_squash,sync,wdelay)
|