User Guide

Chapter 2 Setting Up Share Points 27
5 Select “Map Root user to nobody” if you want the root user on a remote client to have
only minimal privileges to read, write, and execute commands.
6 Select “Map All users to nobody” if you want all users to have minimal privileges to
read, write, and execute.
7 Select “Read-only” if you don’t want client users to be able to modify the contents of
the shared item in any way.
8 Click Save.
File and file range locking (standard POSIX advisory locks) are enabled by default for
NFS share points in Mac OS X Server.
From the Command Line
You can also set up an NFS share point by using the niutil command in Terminal to
add an entry to the NetInfo /exports directory. For more information, see the file
services chapter of the command-line administration guide.
Resharing NFS Mounts as AFP Share Points
Resharing NFS mounts (NFS volumes that have been exported to the Mac OS X Server)
as AFP share points allows clients to access NFS volumes using the secure
authentication of an AFP connection. Resharing NFS mounts also allows Mac OS 9
clients to access NFS file services on traditional UNIX networks.
Note: Quotas set on the original NFS export are not enforced on the AFP reshare.
To reshare an NFS mount as an AFP share point:
1 On the NFS server that’s exporting the original share, make sure the NFS export maps
root-to-root so that AFP (which runs as root) can access the files for the clients. Restrict
the export to the single AFP server (seen as the client to the NFS server). For even
greater security, you can set up a private network for the AFP-to-NFS connection.
2 On the AFP server, create a directory named nfs_reshares at the root level of the file
system. Log in to Terminal as admin and use the command:
sudo mkdir /nfs_reshares
The nfs_reshares directory will work with default permissions, but at a minimum must
allow read/write for root so that the exports can be mounted there and accessed by
the AFP server.
3 Create a subdirectory in the /nfs_reshares directory for each NFS volume you want to
reshare. In Terminal, while logged in as admin, use the command:
sudo mkdir /nfs_reshares/<local mount name>
Replace <local mount name> with the name of the volume as you want it to appear
to AFP clients.
LL2346.Book Page 27 Friday, August 22, 2003 2:38 PM