10400455-002
©2008-14 Overland Storage, Inc.
160
SnapScale/RAINcloudOS 4.1 Administrator’s Guide
6 - Security Options
The entry options are explained in the following table:
Using the Add Host Option.
Follow these steps:
1.
Select
one
of the following options:
•
SnapScale Default Options
– Inserts the default options as described above.
•
Read Only –
Inserts the read only option only.
•
Both –
Inserts default options, but substitutes read only for read/write.
2.
Do
one
of the following in the NFS host text box:
•
To apply the options to all NFS hosts
– Leave this field blank.
•
To apply the options to specific hosts –
Enter one or more IP addresses.
3.
Click
Add Host
.
Entry Code
Meaning
Asterisk
All NFS clients
ro
The directory is shared read only (ro).
rw
The client machine will have read and write (rw) access to the
directory.
insecure
Turns off the options that require requests to originate on an Internet
port less than IPPORT_RESERVED (1024).
root_squash
Forces users connected as root to interact as the “nobody” user (UID
65534). This is the SnapScale default.
no_root_squash
no_root_squash means that if root is logged in on your client
machine, it will have root privileges over the exported filesystem. By
default, any file request made by user root on the client machine is
treated as if it is made by user nobody on the cluster. (Exactly which
UID the request is mapped to depends on the UID of user nobody on
the cluster, not the client.) If no_root_squash is selected, then root on
the client machine will have the same level of access to the files on
the system as root on the cluster. This can have serious security
implications, although it may be necessary if you want to perform any
administrative work on the client machine that involves the exported
directories. You should not specify this option without a good reason.
async
Tells a client machine that a file write is complete – that is, has been
written to stable storage – when NFS has finished handing the write
over to the filesystem.
no_all_squash
Allows non-root users to access the nfs export with their own
privileges.
