NFS Services Administrator's Guide

Configuring and Administering NFS Services
Configuring and Administering NFS Clients
Chapter 2 83
In this example, the NFS client mounts a replicated set of NFS file
systems with different pathnames.
Secure Mounting of Directories
The mount command enables you to specify the security mode for each
NFS mount point. This allows the NFS client to request a specific
security mode. However, if the specific mode does not exist on the server,
then the mount fails. Use the sec option to specify the security mode.
If sec is not specified in NFSv2, then the AUTH_SYS mode is used by
default. If sec is not specified in NFSv3, then the default action is for the
NFS client to query the server about the security mode to be used. The
resulting security mode is negotiated between the NFS client and server.
For more information on the available security modes, see
nfssec (5).
An Example for Securely Mounting a directory
In the following example, the NFS client forces the use of krb5 as the
secure mode. The krb5 secure mode uses the Kerberos V5 protocol to
authenticate users before granting access to the shared filesystems. In
this example, the NFS server, onc21, also supports the same secure
mode.
mount -F nfs -o sec=krb5 onc21:/casey/nfs /casey/nfs
NOTE For specific configuration information, see “Secure NFS Setup with
Kerberos” on page 57.
Changing the Default Mount Options
To change the default mount options, follow these steps:
1. Modify the NFS mount options in the /etc/fstab file, or the AutoFS
map, as needed. For more information on the different mount options
that NFS supports, see mount_nfs (1M).
If you changed the mount options for a directory that is currently
mounted, you must unmount and remount it before the changes take
effect. To unmount and remount the directory, enter the following
commands: