NFS Services Administrator's Guide

Configuring and Administering NFS Services
Configuring and Administering an NFS Server
Chapter 2 55
• Sharing directories with anonymous users based on access rights
given to the superuser
share -F nfs -o rw=Green,root=Green,anon=65535
/vol1/grp1/Green
In this example, superusers on host Green use uid 0 and are treated
as root. The root users on other hosts (Red and Blue) are considered
anonymous and their uids and gids are re-mapped to 65535. The
superusers on host Green are allowed read-write access. All other
clients get read-only access.
• Sharing directories with anonymous users based on access rights
given to them
share -F nfs -o anon=200 /export/newsletter
In this example, the /export/newsletter directory is shared with
all clients. Anonymous users are given the effective user ID of 200.
Other users retain their own user IDs (even if they do not exist in the
NFS server’s passwd database).
Anonymous users are users who have not been authenticated, or
requests that use the AUTH_NONE security mode, or root users on
hosts not included in the
root =list. By default, anonymous users
are given the effective user ID, UID_NOBODY. If the user ID is set to -1,
access is denied.
The ls command displays that a file created by a superuser is owned
by user ID 200. If an anonymous user with a non-zero user ID, for
example, 840, is allowed to create a file in this directory, the ls
command displays that it is owned by user ID 840.