Oracle ZFS Storage Appliance Administration Manual page 408

Share and Project Protocols
hostname:shares default> set sharenfs="rw,euc-kr=*"
Will share the filesystem with 'euc-kr' as the default encoding. The following:
hostname:shares default> set sharenfs="rw,euc-kr=host1.domain.com,euc-jp=host2.domain.
com"
Use the default encoding for all clients except 'host1' and 'host2', which will use 'euc-kr' and
'euc-jp', respectively. The format of the host lists follows that of other CLI NFS options.
Note that some NFS clients do not correctly support alternate locales; consult your NFS client
documentation for details.
NFS Protocol Security Modes
Security modes are set on a per-share basis. The following list describes Kerberos security
settings:
krb - End-user authentication through Kerberos V5
■
krb5i - krb5 plus integrity protection (data packets are tamper proof
■
krb5p - krb5i plus privacy protection (data packets are tamper proof and encrypted)
■
Security modes are specified by appending text in the form "option=mode" where option is sec
and mode is the security setting. For example:
hostname: shares default> set sharenfs="sec=krb5"
Note -
Combinations of Kerberos types can be specified in the security mode setting. The combination
security modes let clients mount with any Kerberos type listed, as shown in the following table.
TABLE 110
Setting
sys
krb5
krb5:krb5i
krb5i
krb5:krb5i:krb5p
krb5p
408 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016
CLI property values that contain the "=" character must be quoted.
Combinations of Kerberos types
Description
System Authentication
Kerberos v5 only - Clients must mount using this flavor.
Kerberos v5, with integrity - Clients may mount using any flavor listed.
Kerberos v5 integrity only - Clients must mount using this flavor.
Kerberos v5, with integrity or privacy - Clients may mount using any flavor listed.
Kerberos v5 privacy only - Clients may mount using this flavor.