From the man page, it appears you can:

sec=sectype[:sectype...] Specifies the security types that an NFS client must support to access the file system path. To apply the security types to all types of access, specify the sec= option once. To apply the security types to specific types of access (anonymous, non-super user, read-only, read-write, or root), specify the sec= option at least twice, once before each access type to which it applies (anon, nosuid, ro, rw, or root, respectively). Note: You cannot apply the same security type to more than one access type. By default, an NFS client must support the sys security type to access a file system path.

At least that's how I read it.

-- Adam Fox adamfox@netapp.com

________________________________

From: Olfen, Michael Sent: Friday, February 22, 2008 8:45 AM To: c-dl-ses; toasters@mathworks.com Cc: Brendle, Andreas Subject: NFS question

Hi folks,

I have a question from my customer about NFS that I can't answer. So I need some help from our NFS "gurus".

Here is the question:

Today we evaluate the possibility to use the NFS service for our Linux systems.

Because not all the Linux server are in one room, we need enhanced security.

Today we use the System-V security adjustments for the exports:

/vol/proj000 -sec=sys,rw=192.0.16.0/24,root=192.0.16.97

For the Linux Systems we must use parallel to the System-V security also Kerberos.

Question:

Is it possible to use Kerberos and System-V on a Volume/NFS export simultaneous?

Is it possible, on the same Volume/NFS export, to use the IP-Address room ( for example 192.0.16.0/24) only with System-V security

and the IP-Address room ( for example 192.0.34.0/24) only with Kerberos?

big thanks 4 help

Michael

Mit freundlichen Grüßen - Kind regards

Michael Olfen

Senior System Engineer

Network Appliance GmbH

Bretonischer Ring 6

D - 85630 Grasbrunn

Tel.: +49-89-900594-104

Mobil: +49-151-12055642

Fax: +49-89-900594-99

molfen@netapp.com mailto:molfen@netapp.com

www.netapp.de http://www.netapp.de

Diese e-Mail kann vertrauliche und/oder rechtlich geschützte Informationen enthalten. Wenn Sie nicht der richtige Adressat sind oder diese e-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese e-Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser e-Mail und ihrer Inhalte ist nicht gestattet.

This e-mail may contain confidential and/or privileged information. If you are not the intended addressee or have received this e-mail in error, please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.

Network Appliance GmbH, Bretonischer Ring 6, 85630 Grasbrunn, Handelsregister: AG München HRB113907, Geschäftsführer: Manfred Reitner