Specifications
Important: Make sure the subnet address you enter is the IP network address that
corresponds to the subnet mask you chose, and not a client address. Otherwise, your
clients can’t access the share point.
A network calculator helps you select the subnet address and mask for the range
of client addresses you want to serve, and you should use one to validate your nal
address/mask combination. If needed, network calculators are available on the Web.
For example, suppose you want to export to clients that have IP addresses in the range
192.168.100.50 through 192.168.100.120.
Using a subnet calculator, you discover that the mask 255.255.255.128 applied to any
address in this range denes a subnet with a network address of 192.168.100.0 and
a range of usable IP addresses from 192.168.100.1 through 192.168.100.126, which
includes the desired client addresses.
So, in Server Admin you enter subnet address 192.168.100.0 and subnet mask
255.255.255.128 in the NFS Export Settings for the share point.
To permit unlimited (and unauthenticated) access to the share point, choose “World.”
8 From the Mapping pop-up menu, set the privilege mapping for the NFS share point:
Choose “Root to Root” if you want the root user to have root privileges to read, write, Â
and carry out commands.
Choose “All to Nobody” if you want users to have minimal privileges to read, write, Â
and carry out commands.
Choose “Root to Nobody” if you want the root user on a remote client to have only Â
minimal privileges to read, write, and carry out commands.
Choose “None” if you don’t want privileges mapped. Â
9 From the Minimum Security pop-up menu, set the level of authentication:
Choose “Standard” if you don’t want to set a level of authentication. Â
Choose “Any” if you want NFS to accept any method authentication. Â
Choose “Kerberos v5” if you want NFS to only accept Kerberos authentication. Â
Choose “Kerberos v5 with data integrity” if you want NFS to accept Kerberos Â
authentication and validate the data (checksum) during transmission.
Choose “Kerberos v5 with data integrity and privacy” to have NFS accept Kerberos Â
authentication, to validate with checksum, and to encrypt data during transmission.
10 If you don’t want client users to change the contents of the shared item, select the
Read only checkbox.
11 Select Allow subdirectory mounting.
This permits clients to mount subfolders of an exported NFS share point. For example,
if you export the /Users/ folder, all its subfolders can be mounted directly.
12 Click OK, then click Save.
44 Chapter 3 Setting Up Share Points