NFS clients can mount only those resources that have been exported. An exported resource is one that you have made available for mounting.
When Data ONTAP receives a mount request from a client, it compares the path name in the mount request to the path names of the exported resources. If Data ONTAP finds a match, the NFS client can mount the resource.
Data ONTAP uses the longest matching prefix in the path name in determining access restrictions.
Suppose you export both the /vol/vol0/home resource and the /vol/vol0 resource. When a host tries to mount the /vol/vol0/home/user1 directory, Data ONTAP applies the access restrictions specified for the /vol/vol0/home resource to determine whether the host should be granted access. Similarly, when a host tries to mount the /vol/vol0 directory, Data ONTAP applies the access restrictions specified for the /vol/vol0 resource.
You can export resources in two ways:
This method exports resources that you want to make available automatically, every time the filer reboots.
This method exports resources temporarily; the exportfs command is not persistent across filer reboots.
For information about specifying what and how resources are exported in the /etc/exports file, see How /etc/exports works. For information about how to use the exportfs command, see Exporting or unexporting resources using the exportfs command.
Regardless of the method for exporting a resource, remember these rules:
The way Data ONTAP exports a resource is similar to that used by the SunOS 4.x operating system. However, unlike SunOS, Data ONTAP permits you to export a resource whose ancestor has already been exported. For example, you can export the /vol/vol0/home/users directory after you export the /vol/vol0/home directory.
When exporting different levels of a directory hierarchy, take care not to give clients greater access permissions at a higher level in the hierarchy. For example, in the following /etc/exports file, the first entry specifies no access restrictions for the /vol/vol0 volume. That is, any host can mount the /vol/vol0 volume as read-write. The second entry restricts access to the /vol/vol0/home directory to specified hosts. However, because the first entry gives any host permission to mount the /vol/vol0 volume, hosts other than host1 and host2 can have access to the /vol/vol0/home directory by mounting the /vol/vol0 volume.
/vol/vol0
/vol/vol0/home -rw=host1:host2
Copyright © 1994-2003, Network Appliance, Inc. All rights
reserved.
Part No. 210-00473
File: nfs2.htm
Last updated: 11/25/03 18:02:36