Depending on how you configured your Gateway Server machines,
configure each NFS client that is to provide access to DFS in one of the
following ways:
•
If you configured your Gateway Servers so that users cannot issue the dfs_login
command to authenticate to DCE, configure your NFS clients without enabling
DCE authentication via the dfs_login command; follow the instructions in
"Configuring a Client Without Enabling Remote Authentication."
•
If you configured your Gateway Servers so that users can issue the dfs_login
command to authenticate to DCE, configure your NFS clients and enable DCE
authentication via the dfs_login command; follow the instructions in
"Configuring a Client and Enabling Remote Authentication."
Because the steps in each of these sections mount /... on an NFS client, users
who do not have DCE accounts can still use the NFS client for
unauthenticated access to DFS. (See "Unauthenticated Access to DFS" for
more information about unauthenticated access; see "Authenticated Access
to DFS" for more information about authenticated access.)
Configuring a Client Without Enabling Remote Authentication
If you configured your Gateway Server machines so that users cannot issue
the dfs_login command to authenticate to DCE, perform the steps in this
section to configure your NFS clients. The steps enable DFS access from an
NFS client without enabling DCE authentication from the client. Users can
authenticate only via the dfsgw add command.
To provide users of an NFS client with access to DFS but not the dfs_login
command, perform the following steps on the client:
1 Log in as the local root user on the machine.
2 Mount the root of the DCE namespace, /..., on the machine. In the command,
hostname is the hostname of a machine that exports /.... Each machine
configured as a Gateway Server exports /.... When users access DFS from an
NFS client, they go through the Gateway Server machine that exports /... to
the client. To achieve proper load balancing if you configure multiple
Gateway Server machines, ensure that the mounts of /... on your NFS clients
are divided evenly among your Gateway Servers. (You can use the NFS
automount mechanism with a direct automount map to mount /...; see your
vendor's NFS documentation for more information.)
The DFS/NFS Secure Gateway
Configuring Gateway Server Machines
151