1
[root@westos mnt]# yum install nfs-utils
[root@westos mnt]# systemctl enable nfs-server
ln -s '/usr/lib/systemd/system/nfs-server.service' '/etc/systemd/system/nfs.target.wants/nfs-server.service'
[root@westos mnt]# systemctl start nfs-server
[root@westos mnt]# firewall-cmd --permanent --add-service=nfs
success
[root@westos mnt]# firewall-cmd --permanent --add-service=rpc-bind
success
[root@westos mnt]# firewall-cmd --permanent --add-service=mountd
success
[root@localhost ~]# firewall-cmd --reload
success
2共享目录
[root@westos ~]# systemctl status nfs-server
nfs-server.service - NFS Server
Loaded: loaded (/usr/lib/systemd/system/nfs-server.service; enabled)
Active: active (exited) since Sat 2017-06-03 21:04:56 EDT; 35min ago
Process: 2007 ExecStart=/usr/sbin/rpc.nfsd $RPCNFSDARGS $RPCNFSDCOUNT (code=exited, status=0/SUCCESS)
Process: 2003 ExecStartPre=/usr/sbin/exportfs -r (code=exited, status=0/SUCCESS)
Process: 2002 ExecStartPre=/usr/libexec/nfs-utils/scripts/nfs-server.preconfig (code=exited, status=0/SUCCESS)
Main PID: 2007 (code=exited, status=0/SUCCESS)
CGroup: /system.slice/nfs-server.service
Jun 03 21:04:56 westos systemd[1]: Starting NFS Server...
Jun 03 21:04:56 westos systemd[1]: Started NFS Server.
root@westos ~]# mkdir /piblic 建立共享目录
[root@westos ~]# chmod 777 /public
chmod: cannot access ‘/public’: No such file or directory
[root@westos ~]# chmod 777 /piblic
[root@westos ~]# vim /etc/exportfs
[root@westos ~]# exportfs -rv 重新启动共享目录
/public *(rw,sync) 共享/public给所有人并可写
/public 172.25.0.0/24(sync) 共享给0.0这个网段
/public *.example.com(sync) 共享给example.com域的所有主机
/public 172.25.0.14(ro,sync) 172.25.0.250(rw,sync) 11只读 250可写
/public *(sync,no_root_squash) 共享给所有人，当客户端用root挂载不转化身份
利用kerberos保护nfs输出
在server上
开启kerberos认证，得到ldap用户
[root@localhost ~]# yum install sssd krb-workstation authconfig-gtk -y
[root@localhost ~]# logout
Connection to 172.25.254.114 closed.
[kiosk@foundation14 Desktop]$ ssh root@172.25.254.114 -X 打开图形
root@172.25.254.114's password:
Last login: Sat Jun 3 23:48:41 2017 from 172.25.254.14
/usr/bin/xauth: file /root/.Xauthority does not exist
[root@localhost ~]# authconfig-gtk 安装认证
[root@localhost ~]# wget http://172.25.254.254/pub/keytabs/server14.keytab -O /etc/krb5.keytab
--2017-06-03 23:59:28-- http://172.25.254.254/pub/keytabs/server14.keytab
Connecting to 172.25.254.254:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1258 (1.2K)
Saving to: ‘/etc/krb5.keytab’
100%[==========================================>] 1,258 --.-K/s in 0s
2017-06-03 23:59:28 (190 MB/s) - ‘/etc/krb5.keytab’ saved [1258/1258]
下载认证文件
本文转自铁骑传说51CTO博客，原文链接：http://blog.51cto.com/ybzbfs/1933554 ，如需转载请自行联系原作者
