1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395
|
.\"
.\" Original manual page is a part of nfs-server package.
.\" Following is a exerpt from README of version 2.2beta47.
.\"
.\" 7. Copyright
.\"
.\" Much of the code in this package was originally written by
.\" Mark Shand, and is placed under the following copyright:
.\"
.\" This software may be used for any purpose provided
.\" the above copyright notice is retained. It is
.\" supplied as is, with no warranties expressed or
.\" implied.
.\"
.\" Other code, especially that written by Rick Sladkey and some
.\" replacement routines included from the GNU libc, are covered
.\" by the GNU General Public License, version 2, or (at your
.\" option) any later version.
.\"
.\" Japanese Version Copyright (c) 1997 ISHIOKA Takashi
.\" all rights reserved.
.\" Translated Mon Sep 8 14:02:18 1997
.\" by ISHIOKA Takashi
.\" Mon Feb 9 15:16:20 1998: correction
.\" Modified Wed 11 Nov 1998 by NAKANO Takeo <nakano@apm.seikei.ac.jp>
.\" Updated & Modified Sun Jan 27 17:30:35 JST 2002
.\" by Yuichi SATO <ysato@h4.dion.ne.jp>
.\" Modified Tue Feb 19 19:06:53 JST 2002 by Yuichi SATO
.\"
.TH EXPORTS 5 "11 August 1997"
.UC 5
.SH ̾
exports \- ݡ (export) NFS ե륷ƥ
.SH
.B /etc/exports
.SH
.I /etc/exports
եϥե륷ƥΥȥꥹȤǡ
ɤΥե륷ƥ NFS 饤Ȥ˥ݡ (export) Ƥ褤
ȤͿ롣
NFS mount ǡ
.BR mountd (8)
ʤӤ
NFS file server ǡ
.BR nfsd (8)
Ѥ롣
.PP
Υեν SunOS
.I exports
եȤۤƱǤ롣Ǥ륪ץ
ĤɲäƤ롣
줾ιԤˤϡޥȥݥȤȡ
ΥݥȤΥե륷ƥޥȤǤ
ޥͥåȥ롼פΥꥹȤƤ롣
ޥȥѥΥꥹȤ̤ǤäΤ
줾Υޥ̾θ֤ȤǤ롣
Ԥ̵뤵졢# ʹ߹ޤǤϥȤȤߤʤ롣
˥ХååСȥϼιԤ˷³Ǥ롣
.PP
.SS ޥ̾Υեޥå
NFS 饤ȤϤˡǻǤ롣
.IP "single host
ϤäȤ̤ΥեޥåȤǤ롣ۥȤλˤϡ
쥾ФǧǤάFQDNIP ɥ쥹ΤɤѤƤ褤
.IP "netgroups
NIS Υͥåȥ롼פ
.I @group
Τ褦Ϳ뤳ȤǤ롣ͥåȥ롼פΤ٤ƤΥСΤ
ۥȤʬФ졢ꥹȤɲä롣
ۥȤʬäꡢñΥå (\-) äΤ̵뤵롣
.IP 磻ɥ
ޥ̾λˤϡ磻ɥʸȤ
\fI*\fP \fI?\fP Ѥ뤳ȤǤ롣
Ȥ \fIexports\fR եѥȤˤǤ롣
㤨 \fI*.cs.foo.edu\fR ϥɥᥤ \fIcs.foo.edu\fR ˤ
٤ƤΥۥȤ˥ޥå롣
Υ磻ɥʸϥɥᥤ̾Υɥå (.) ˤϥޥåʤ
äƾ嵭Υѥϡɥᥤ
\fIa.b.cs.foo.edu\fR Τ褦ʥۥȤˤϥޥåʤ
.IP "IP networks
ǥ쥯ȥ IP () ͥåȥ¸ߤ뤹٤ƤΥۥȤ
Ʊ˥ݡȤ뤳ȤǤ롣
ˤ IP ɥ쥹ȥͥåȥޥΥڥ
.I address/netmask
Τ褦˻ꤹФ褤
.TP
.B =public
üʰ̣ġ֥ۥ̾פǡͿ줿ǥ쥯ȥ
public root ǥ쥯ȥǤ뤳Ȥ
(WebNFS public root ϥɥξܺ٤˴ؤƤ
.BR nfsd (8)
WebNFS ΥȤΤ)
νѤݤˤϡ
.B =public
ιԤǤͣΥۥ̾ȥǤʤФʤʤ
ޤݡȥץꤷƤϤʤʤ
λˤäơ
ǥ쥯ȥ꤬ºݤ˥ݡȤ櫓Ǥ\fBʤ\fPȤդ뤳ȡ
ݡȥץϡȤ̤Υȥǻꤹɬפ롣
.PP
public root ѥ
.I nfsd
.B \-\-public\-root
ץꤷƵư뤳ȤˤäƤǤ롣
public root ʣ̵뤵롣
.PP
.SS Ūʥץ
.IR mountd " " nfsd
ϰʲΥݡȥץդ롣
.TP
.IR secure "\*d
ΥץꤹȡIPPORT_RESERVED (1024) 꾮
internet ݡȤȯꥯȤĤʤ
ΥץϥǥեȤͭˤʤäƤ롣
̵ˤˤ
.IR insecure
Ȼꤹ롣
.TP
.IR rw
饤Ȥˤեȥǥ쥯ȥѹĤ롣
ǥեȤǤϡ饤Ȥɤ߹ߤΥꥯȤ¤Ƥ롣
(
.I ro
ץƱ)
.TP
.I noaccess
Υץդ饤Ȥϡ
Υǥ쥯ȥʲΤ٤ƤΥեФƥǤʤʤ롣
ǥ쥯ȥ곬ؤ饤Ȥ˥ݡȤȤ
Υ֥ǥ쥯ȥʤɤǤ롣
noaccess ե饰դǥ쥯ȥΥ饤Ȥθϡ
¤줿ΤȤʤ롣
ǥ쥯ȥ°ȡ`.' `..' α롣
readdir Ф֤륨ȥ⤳ 2 Ĥˤʤ롣
.TP
.IR link_relative
ХѥΥܥåХѥΥѴ
(ХѥȤϡƤ "/" ǻϤޤΤǤ)
ѴϼΤ褦˹Ԥ롣
ޤ֤Ƥǥ쥯ȥΡФΥ롼Ȥ
롣Ƥο '../' Хղä롣
ޥȥݥȤΥ롼Ȥΰ֤ۤʤ硢
Ѵˤ̯ (餯㳲θȤʤ)
ޤޤޤǽ롣
.TP
.IR link_absolute
ƤΥܥåΤޤޤˤ롣줬ǥեȤǤ롣
.SS 桼 ID Υޥåԥ
.PP
ХޥΥեФ
.I nfsd
ˤ륢ȥϡ
줾 NFS RPC request κݤͿ uid gid ˴ŤƤ롣
桼̾оˤ뼫ʬΥեˤϡ
줬̤Υե륷ƥˤΤƱͤ
ǽǤ뤳ȤԤƤ롣
ˤϥ饤ȤȥоѤ
uid gid 줾ƱǤɬפ뤬
Ͼ˿ǤȤϸ¤餺˾ޤȤ¤ʤ
.PP
饤ȥޥ root NFS ФΥե˥Ȥ
Ф root ȤưƤޤΤϡۤȤɤξ˾ޤʤ
Τ uid 0 ̤̤ id (anonymous
.I nobody
uid) ˥ޥåԥ롣
ư `root squashing' ȸƤФ뤬줬ǥեȤǤ롣
.I no_root_squash
ȤХդˤǤ롣
.PP
ǥեȤǤϡ
.I nfsd
ϵư password ե
.I nobody
桼Ȥơ
anonymous uid gid 褦Ȥ롣
⤷줬Ĥʤˤϡ
uid gid Ȥ -2 (Ĥޤ 65534) Ѥ롣
οͤ
.IR anonuid " " anongid
ץˤäѹǤ롣
.PP
˲ä
.I nfsd
ˤä nobody ˳Ƥ٤Ŭ uid gid Ȥꤹ뤳ȤǤ롣
Ǹˡ
.I all_squash
ץꤹС
Ƥ user request anonymous uid ˳Ƥ뤳ȤǤ롣
.PP
ޥȤ uid ۤʤ褦ʾؤƳưפˤ뤿ᡢ
.I nfsd
ǤϥФ uid 饤Ȥ uid (뤤Ϥεդ)
ưŪ˥ޥåԥˡĤƤ롣
Ūʥޥåԥե롢NIS ١Υޥåԥ
.I ugidd
١ΥޥåԥǤ롣
.PP
.I ugidd
١Υޥåԥ
.I map_daemon
ץꤷ UGID RPC ץȥȤвǽȤʤ롣
Υץȥưˤϥ饤Ȥ
.IR ugidd (8)
mapping ǡưɬפ롣
3 ĤˡǡƥŪˤϺǰǤ롣
ʤʤ
.I ugidd
ưȡïǤ⥯饤Ȥ䤤碌ơ
ͭʥ桼̾ΥꥹȤǤƤޤǤ롣
.I ugidd
ؤΥΥۥȤΤߤ¤ơȤ뤳ȤǤ롣
ˤϵĤۥȤΥꥹȤ
.I hosts.allow
ޤ
.I hosts.deny
ե˵ҤФ褤ӥ̾
.I ugidd
Ǥ롣ΥեʸˡˤĤƤϡ
.IR hosts_access (5)
ȤƤۤ
.PP
Ūʥޥåԥ
.I map_static
ץˤäư뤳ȤǤ롣
ΥץϡޥåԥҤե̾ˤȤ롣
NIS ١Υޥåԥϡ饤Ȥ NIS Ф䤤碌ơ
СۥȤǤΥ桼̾ӥ롼̾
饤ȤǤΥ桼̾ӥ롼̾ؤΡ
ޥåԥꤹ롣
.PP
ʲ˥ޥåԥץδʥꥹȤ:
.TP
.IR root_squash
uid/gid 0 ΥꥯȤ annonymous uid/gid ˥ޥåԥ롣
Υץϡroot ʳ uid ˤŬѤʤ
¾ˤդ٤ uid ¸ߤ (㤨
.I bin
ʤ) Τǡդɬפ롣
.TP
.IR no_root_squash
root squashing ̵ˤ롣
Υץϼ˥ǥ쥹饤ȤˤȤäǤ롣
.TP
.IR squash_uids " and " squash_gids
Υץϡannonymous ˥ޥåԥ
uid gid ΥꥹȤ뤿ΤΤǤ롣
id ΥꥹȤȤƤϰʲΤ褦ʻ꤬ͭǤ:
.IP
.IR squash_uids=0-15,20,25-50
.IP
̾ squash ꥹȤϤäȤäȴñʤΤˤʤ
.TP
.IR all_squash
Ƥ uid gid anonymous ˥ޥåԥ롣
NFS ݡȤ줿 FTP ǥ쥯ȥ䡢
news Υסǥ쥯ȥǤ롣
ȵդΥץ
.IR no_all_squash
Ǥꡢ餬ǥեȤˤʤäƤ롣
.TP
.IR map_daemon
Υץ ưŪ uid/gid Υޥåԥͭˤ롣
NFS request Τ줾 uid ϥоб uid Ѵ졢
NFS reply uid Ϥ줾դѴ롣
ΥץѤˤϡ饤ȥۥȤ
.BR rpc.ugidd (8)
ưƤ뤳ȤɬפǤ롣
ǥեȤǤϡƤ uid Ѥʤ
.I map_identity
ȤʤäƤ롣
̤ squash ץϡ
ưŪʥޥåԥݤˤ뤳ȤʤŬѤǤ롣
.TP
.IR map_static
ΥץꤹŪʥޥåԥǽȤʤ롣
uid/gid ޥåԥҤ줿ե̾ʲΤ褦˻ꤹ롣
.IP
.IR map_static=/etc/nfs/foobar.map
.IP
եΥեޥåȤϰʲΤ褦ʤΤǤ롣
.IP
.nf
.ta +3i
# Mapping for client foobar:
# remote local
uid 0-99 - # squash these
uid 100-500 1000 # map 100-500 to 1000-1400
gid 0-49 - # squash these
gid 50-100 700 # map 50-100 to 700-750
.fi
.TP
.IR map_nis
Υץꤹ NIS ١ uid/gid ޥåԥǽȤʤ롣
㤨СФ uid 123 λȡ
ФϤޤ uid бΥ̾Ĵ٤롣
NFS 饤Ȥ NIS Ф³ơ
Υ̾б uid 롣
.IP
ԤˤϡNFS Ф饤Ȥ NIS ɥᥤ
ΤäƤʤФʤʤ
Υɥᥤ
.I map_nis
ץΰȤưʲΤ褦˻ꤹ롣
.IP
.I map_nis=foo.com
.IP
NIS ɥᥤҤǤϡ̾ϽʬǤϤʤ
.I nfsd
NIS Ф˥ȤǤ褦ˤˤϡ
¾κȤɬפȤʤ
ѤƤǥȥӥ塼 NYS 饤֥ȤäƤϡ
饤ȤΥɥᥤΥФ
.I /etc/yp.conf
˰İʾꤹɬפ
¾ NIS 饤֥ѤƤˤϡ
.I yp.conf
ˤäǤ褦ʡü
.IR ypbind (8)
ꤹɬפ뤫⤷ʤ
.TP
.IR anonuid " " anongid
Υץ anonymous Ȥ uid gid Ū˥åȤ롣
ϡƤΥꥯȤͤΥ桼ˤʤ褦
PC/NFS clients ˤȤäƼͭǤ롣
㤨СʲΡפΥǤ
.I /home/joe
ȤݡȥȥƤۤ
Ǥϡ(joe ΤΤǤȻפ) ƤΥꥯȤ
uid 150 ˥ޥåԥ롣
.IP
.SH
.PP
.nf
.ta +3i
# sample /etc/exports file
/ master(rw) trusty(rw,no_root_squash)
/projects proj*.local.domain(rw)
/usr *.local.domain(ro) @trusted(rw)
/home/joe pc001(rw,all_squash,anonuid=150,anongid=100)
/pub (ro,insecure,all_squash)
/pub/private (noaccess)
.fi
.PP
1 ܤϡmaster trusty Фơ
٤ƤΥե륷ƥΥޥȵĤФƤ롣
ߤεĤ˲ä trusty ФƤϡ
٤Ƥ uid squashing ̵ˤƤ롣
2 ܤ 3 ܤϡۥ̾ؤΥ磻ɥɤѤȡ
ͥåȥ롼 (@trusted' Υȥ) Ǥ롣
4 ܤϡǽҤ٤ PC/NFS 饤ѥȥǤ롣
5 ܤϡ FTP ǥ쥯ȥƤΥۥȤ˥ݡȤƤ롣
٤ƤΥꥯȤ nobody ȤǼ¹Ԥ롣
ޤΥȥ
.I insecure
ץˤäơNFS port Ȥʤ褦˼줿 NFS
饤ȤΥĤƤ롣
ǸιԤǤϡprivate ǥ쥯ȥؤΥ٤Ƥ
饤ȤФƵݤ褦ˤƤ롣
.SH ٹ
¾ NFS Server μȰ㤤
.B nfsd
Ǥϡ㤨
.IR /usr " " /usr/X11R6
Τ褦ˡǥ쥯ȥȤΥ֥ǥ쥯ȥȤξ
ƱۥȤ˥ݡȤ뤳ȤǤ롣
ξ硢ٹ礬äȤ⤤ȥΥޥȥץŬѤ롣
㤨Х饤ȥۥȾΥ桼
.IR /usr/X11R6
Υե˥ϡ
.I /usr/X11R6
ΥȥǤ줿 ޥȥץŬѤ롣
Υ롼ϡȥΥۥȻ꤬
磻ɥɤͥåȥ롼פΤȤˤŬѤ롣
.SH ե
/etc/exports
.SH ֤
.BR nfsd (8)
.BR mountd (8)
ưƤС
եβΥ顼Ͼ
.BR syslogd (8)
Ѥ𤵤롣
DAEMON NOTICE ٥Ȥʤ롣
ΤȤ̤ΤΥۥƤ𤵤롣
ưˤ
.BR named (8)
ƤΥۥȤΤʤ⤢ꤦ롣
äƥۥȤĤ뤿Ӥˡ
.BR syslogd (8)
ˡƱѥ𤵤롣
.SH Ϣ
mountd(8), nfsd(8)
|