Configuring the Gateway Server Process
To configure the Gateway Server (dfsgwd) process, perform the following
steps on the machine to be configured as a Gateway Server. The steps assume
that the BOS Server is already running on the machine. In all of the steps,
hostname is the hostname of the local machine.
Note:
You need to perform some steps only when you configure the first
Gateway Server process. Such steps are qualified with the phrase for the
first Gateway Server process.
1.
If you have not already done so, perform all the steps in “Configuring a
Gateway Server Without Enabling Remote Authentication” on page 6 to
install the dfsgw binary file on the machine and to export /... from the
machine.
2.
If you have not already done so, log in as the local superuser root on the
machine.
3.
Install the binary file for the dfsgwd process in the directory dcelocal/bin
on the machine. The dfsgwd process provides users of NFS clients with a
remote interface to the authentication table maintained on the Gateway
Server machine.
4.
Add the dfsgw service to the Internet services database. The dfsgw
service provides the login facility for the NFS/DFS Secure Gateway. To
add the service, do one of the following:
v
If you use the /etc/services file in your environment, add an entry for
the dfsgw service to the /etc/services file on the machine.
v
If you use a Network Information Service (NIS) services map in your
environment, add an entry for the dfsgw service to the NIS services
map file on the NIS master. Add the entry to the services map only for
the first Gateway Server process; do not add the entry for additional
Gateway Server processes or NFS clients.
In either case, you need to add the following entry for the service:
dfsgw
438/udp
dlog
where dfsgw is the name of the service, 438 is the port at which the
service receives RPCs, udp is the protocol the service uses to
communicate, and dlog is an alias for the dfsgw service.
5.
Authenticate to DCE as a principal who has the following ACL
permissions on entries in the registry database:
v
The i permission on the directory hosts/hostname.
v
For the first Gateway Server process, the i permission on the directory
subsys/dce
.
Chapter 2. Configuring Gateway Server Machines
9
Summary of Contents for NFS/DFS Secure Gateway
Page 1: ...DFS for Solaris NFS DFS Secure Gateway Guide and Reference V ersion 3 1 GC09 3993 00...
Page 2: ......
Page 3: ...DFS for Solaris NFS DFS Secure Gateway Guide and Reference V ersion 3 1 GC09 3993 00...
Page 6: ...iv DFS for Solaris NFS DFS Secure Gateway Guide and Reference...
Page 10: ...viii DFS for Solaris NFS DFS Secure Gateway Guide and Reference...
Page 14: ...4 DFS for Solaris NFS DFS Secure Gateway Guide and Reference...
Page 22: ...12 DFS for Solaris NFS DFS Secure Gateway Guide and Reference...
Page 34: ...24 DFS for Solaris NFS DFS Secure Gateway Guide and Reference...
Page 51: ...dfsgw_delete 8dfs dfsgw_query 8dfs Chapter 5 Configuration File and Command Reference 41...
Page 58: ...48 DFS for Solaris NFS DFS Secure Gateway Guide and Reference...
Page 65: ......
