You can create NFS exports to share files in OneFS with UNIX-based clients. The NFS service runs in user space and distributes the load across all nodes in the cluster. This enables the service to be highly scalable and support thousands of exports. As a best practice, however, you should avoid creating a separate export for each client on your network. It is more efficient to create fewer exports, and to use access zones and user mapping to control access.
Procedure
1. Click Protocols > UNIX Sharing (NFS) > NFS Exports. 2. Click + Add an NFS Export.
3. (Optional) In the Description field, type a comment that describes the export. 4. (Optional) Specify the NFS clients that are allowed to access the export.
You can specify NFS clients in any or all of the client fields, as described in the following table. A client can be identified by host name, IPv4 or IPv6 address, subnet, or netgroup. IPv4 addresses mapped into the IPv6 address space are translated and stored as IPv4 addresses to remove any possible ambiguities.
You can specify multiple clients in each field by typing one entry per line. Note
If you do not specify any clients, all clients on your network are allowed access to the export. If you specify clients in any of the rule fields, such as Always Read-Only Clients, the applicable rule is only applied to those clients.
If you add the same client to more than one list and the client is entered in the same format for each entry, the client is normalized to a single list in the following order of priority:
l Root Clients
l Always Read-Write Clients l Always Read-Only Clients l Clients
Setting Description
Clients Specifies one or more clients to be allowed access to the export. Access level is controlled through export permissions.
Always Read-Write Clients
Specifies one or more clients to be allowed read/write access to the export regardless of the export's access-restriction setting. This is equivalent to adding a client to the Clients list with the Restrict access to read-only setting cleared.
Setting Description Always
Read-Only Clients
Specifies one or more clients to be allowed read-only access to the export regardless of the export's access-restriction setting. This is equivalent to adding a client to the Clients list with the Restrict access to read-only setting selected.
Root Clients Specifies one or more clients to be mapped as root for the export. This setting is equivalent to adding a client to the Clients list and mapping root users to the root user name.
5. For the Directory Paths setting, type or browse to the directory that you want to export. You can add multiple directory paths by clicking Add another directory path for each additional path.
6. Specify export permissions: l Restrict actions to read-only.
l Enable mount access to subdirectories. Allow subdirectories below the path(s) to be mounted.
7. Specify User/Group mapping.
If you select the Use custom option, you can limit access by mapping root users or all users to a specific user and group ID. For root squash, map root users to the user name nobody.
8. Specify Security Type(s).
If you select the Use custom option, you can select one or more of the following security types:
l UNIX (system) l Kerberos5
l Kerberos5 Integrity l Kerberos5 Privacy
9. Configure Advanced NFS Export Settings.
We recommend that you do not change advanced settings unless it is necessary and you fully understand the consequences of these changes.
10.Click Save. Results
The new NFS export is created and shown at the top of the NFS Exports list.
Modify an NFS export
You can modify the settings for an existing NFS export. In some cases, modifying an NFS export could invalidate existing NFS client connections.
Procedure
1. Select Protocols > UNIX Sharing (NFS) > NFS Exports.
2. In the NFS Exports list, click View details for the export that you want to modify. 3. For each setting that you want to modify, click Edit, make the change, and then click
Save. 4. Click Close.
5. Click Hide details to redisplay the NFS Exports list.
Delete an NFS export
You can delete unneeded NFS exports. Any current NFS client connections to these exports become invalid.
Note
You can delete all the exports on a cluster at once. Click the Export ID/Path check box at the top of the NFS Exports list, and then select Delete from the drop-down list to the right. Procedure
1. Select Protocols > UNIX Sharing (NFS) > NFS Exports.
2. In the NFS Exports list, click the check box to the left of the export that you want to delete.
3. Click Delete.
4. In the confirmation dialog box, click Delete to confirm the operation.
Check NFS exports for errors
You can check for errors in NFS exports, such as conflicting export rules, invalid paths, and unresolvable hostnames and netgroups.
This procedure is available only through the CLI. Procedure
1. Run the isi nfs exports check command. In the following example output, no errors were found:
ID Message --- --- Total: 0
In the following example output, export 1 contains a directory path that does not currently exist:
ID Message
--- 1 '/ifs/test' does not exist --- Total: 1