NFS实例 rhel 7

最新推荐文章于 2022-11-14 14:49:55 发布

weixin_34233856

最新推荐文章于 2022-11-14 14:49:55 发布

阅读量120

点赞数

文章标签：开发工具 ldap 运维

原文链接：https://yq.aliyun.com/articles/532139

版权

NFS实例 rhel 7

1.在server0上，要求共享目录/nfstest,允许网络上任何主机都能以只读的方式访问目标服务器，在server0上，共享目录/nfsprivate，仅允许example.com域可以访问，域内主机拥有读写功能，并且使用kerboers安全认证。验证所用文件使用http://classroom.example.com/pub/keytabs/server0.keytab.

2.Desktop0上使用krb5p来至server0上nfs共享/nfsprivate目录的共享进行安全认证，验证所用文件使用http://classroom.example.com/pub/keytabs/desktop0.keytab.要求每次开机都能自动挂载。

服务器：

[root@server0 ~]# lab nfskrb5 setup

Installing packages ...

Updating authconfig for ldap & krb5 ...

SUCCESS

[root@server0 ~]#

[root@server0 ~]# firefox

[root@server0 ~]# yum -y install nfs*

[root@server0 ~]# cd /

[root@server0 /]# mkdir abc

[root@server0 /]# mkdir krb5

[root@server0 /]# chmod 777 abc krb5

[root@server0 /]# vim /etc/exports

/abc 172.25.0.0/24(ro)

/krb5 172.25.0.0/24(sec=krb5p,rw)

[root@server0 /]# exportfs -rv

exporting 172.25.0.0/24:/krb5

exporting 172.25.0.0/24:/abc

[root@server0 /]# systemctl enable nfs-secure-server

[root@server0 /]# systemctl start nfs-secure-server

[root@server0 /]# systemctl enable nfs-server

[root@server0 /]# systemctl start nfs-server

[root@server0 /]# systemctl start rpcbind

[root@server0 /]# systemctl enable rpcbind

[root@server0 /]# firewall-cmd --permanent --add-service=nfs

success

[root@server0 /]# firewall-cmd --reload

success

[root@server0 /]# showmount -e localhost

Export list for localhost:

/krb5 172.25.0.0/24

/abc 172.25.0.0/24

[root@server0 /]#

客户端

[root@desktop0 ~]# lab nfskrb5 setup

Installing packages ...

Updating authconfig for ldap & krb5 ...

SUCCESS

[root@desktop0 ~]#

[root@desktop0 ~]# yum -y install nfs*

[root@desktop0 ~]# firefox

下载desktop0的kerb5.kerborkey

[root@desktop0 ~]# systemctl start nfs-secure

[root@desktop0 ~]# mkdir /mnt/abc

[root@desktop0 ~]# mkdir /mnt/krb5

[root@desktop0 ~]# mount -t nfs server0:/abc /mnt/abc

[root@desktop0 ~]# mount -o sec=krb5p server0:/krb5 /mnt/krb5/

[root@desktop0 ~]# df -TH

Filesystem Type Size Used Avail Use% Mounted on

/dev/vda1 xfs 11G 3.5G 7.3G 33% /

devtmpfs devtmpfs 950M 0 950M 0% /dev

tmpfs tmpfs 966M 82k 966M 1% /dev/shm

tmpfs tmpfs 966M 18M 948M 2% /run

tmpfs tmpfs 966M 0 966M 0% /sys/fs/cgroup

server0:/abc nfs4 11G 3.5G 7.3G 33% /mnt/abc

server0:/krb5 nfs4 11G 3.5G 7.3G 33% /mnt/krb5

[root@desktop0 ~]# cd /mnt/krb5/

[root@desktop0 krb5]# touch kr

[root@desktop0 krb5]# ll

total 0

-rw-r--r--. 1 nfsnobody nfsnobody 0 Oct 3 23:19 kr

[root@desktop0 krb5]# cd /mnt/abc/

[root@desktop0 abc]# touch a

touch: cannot touch 'a': Read-only file system

[root@desktop0 abc]# ll

total 0

[root@desktop0 abc]#

vim etc/fstab

server0:/krb5 /mnt/krb5 nfs sec=krb5p,defaults 0 0

[root@desktop0 /]# reboot

Connection to desktop0 closed by remote host.

Connection to desktop0 closed.

[root@foundation0 Desktop]# ssh -X root@desktop0

Last login: Sat Oct 3 23:09:31 2015 from 172.25.0.250

(process:1691): dconf-WARNING **: failed to commit changes to dconf: Could not connect: Connection refused