NFS实例 rhel 7

7iuyk

                      NFS实例 rhel 7                               
1.在server0上，要求共享目录/nfstest,允许网络上任何主机都能以只读的方式访问目标服务器，在server0上，共享目录/nfsprivate，仅允许example.com域可以访问，域内主机拥有读写功能，并且使用kerboers安全认证。验证所用文件使用http://classroom.example.com/pub/keytabs/server0.keytab.
2.Desktop0上使用krb5p来至server0上nfs共享/nfsprivate目录的共享进行安全认证，验证所用文件使用http://classroom.example.com/pub/keytabs/desktop0.keytab.要求每次开机都能自动挂载。
服务器：
[iyunv@server0 ~]# lab nfskrb5 setup
Installing packages ...
Updating authconfig for ldap & krb5 ...
SUCCESS
[iyunv@server0 ~]#
[iyunv@server0 ~]# firefox       
       
[iyunv@server0 ~]# yum -y install nfs*       
[iyunv@server0 ~]# cd /
[iyunv@server0 /]# mkdir abc       
[iyunv@server0 /]# mkdir krb5       
[iyunv@server0 /]# chmod 777 abc krb5       
[iyunv@server0 /]# vim /etc/exports       
/abc 172.25.0.0/24(ro)
/krb5 172.25.0.0/24(sec=krb5p,rw)
[iyunv@server0 /]# exportfs -rv       
exporting 172.25.0.0/24:/krb5
exporting 172.25.0.0/24:/abc
[iyunv@server0 /]# systemctl enable nfs-secure-server       
[iyunv@server0 /]# systemctl start nfs-secure-server       
[iyunv@server0 /]# systemctl enable nfs-server        
[iyunv@server0 /]# systemctl start nfs-server       
[iyunv@server0 /]# systemctl start rpcbind       
[iyunv@server0 /]# systemctl enable rpcbind       
[iyunv@server0 /]# firewall-cmd --permanent --add-service=nfs       
success
[iyunv@server0 /]# firewall-cmd --reload        
success
[iyunv@server0 /]# showmount -e localhost       
Export list for localhost:
/krb5 172.25.0.0/24
/abc  172.25.0.0/24
[iyunv@server0 /]#
客户端
[iyunv@desktop0 ~]# lab nfskrb5 setup       
Installing packages ...
Updating authconfig for ldap & krb5 ...
SUCCESS
[iyunv@desktop0 ~]#
[iyunv@desktop0 ~]# yum -y install nfs*       
[iyunv@desktop0 ~]# firefox       
下载desktop0的kerb5.kerborkey
[iyunv@desktop0 ~]# systemctl start nfs-secure
[iyunv@desktop0 ~]# mkdir /mnt/abc       
[iyunv@desktop0 ~]# mkdir /mnt/krb5       
[iyunv@desktop0 ~]# mount -t nfs server0:/abc /mnt/abc       
[iyunv@desktop0 ~]# mount -o sec=krb5p server0:/krb5 /mnt/krb5/        
[iyunv@desktop0 ~]# df -TH       
Filesystem     Type      Size  Used Avail Use% Mounted on
/dev/vda1      xfs        11G  3.5G  7.3G  33% /
devtmpfs       devtmpfs  950M     0  950M   0% /dev
tmpfs          tmpfs     966M   82k  966M   1% /dev/shm
tmpfs          tmpfs     966M   18M  948M   2% /run
tmpfs          tmpfs     966M     0  966M   0% /sys/fs/cgroup
server0:/abc   nfs4       11G  3.5G  7.3G  33% /mnt/abc
server0:/krb5  nfs4       11G  3.5G  7.3G  33% /mnt/krb5
[iyunv@desktop0 ~]# cd /mnt/krb5/       
[iyunv@desktop0 krb5]# touch kr       
[iyunv@desktop0 krb5]# ll       
total 0
-rw-r--r--. 1 nfsnobody nfsnobody 0 Oct  3 23:19 kr
[iyunv@desktop0 krb5]# cd /mnt/abc/       
[iyunv@desktop0 abc]# touch a       
touch: cannot touch 'a': Read-only file system
[iyunv@desktop0 abc]# ll
total 0
[iyunv@desktop0 abc]#
vim etc/fstab
server0:/krb5 /mnt/krb5 nfs sec=krb5p,defaults 0 0
[iyunv@desktop0 /]# reboot       
Connection to desktop0 closed by remote host.
Connection to desktop0 closed.
[iyunv@foundation0 Desktop]# ssh -X root@desktop0       
Last login: Sat Oct  3 23:09:31 2015 from 172.25.0.250
(process:1691): dconf-WARNING **: failed to commit changes to dconf: Could not connect: Connection refused
[iyunv@desktop0 ~]# df -TH       
Filesystem     Type      Size  Used Avail Use% Mounted on
/dev/vda1      xfs        11G  3.5G  7.3G  33% /
devtmpfs       devtmpfs  950M     0  950M   0% /dev
tmpfs          tmpfs     966M   82k  966M   1% /dev/shm
tmpfs          tmpfs     966M   18M  948M   2% /run
tmpfs          tmpfs     966M     0  966M   0% /sys/fs/cgroup
server0:/krb5  nfs4       11G  3.5G  7.3G  33% /mnt/krb5