Configuring Nfs Clients To Access Dfs - HP j6750 Supplementary Manual

The DFS/NFS Secure Gateway
Configuring Gateway Server Machines
10 Add a server key for the hosts/hostname/dfsgw-server principal to the
/krb5/v5srvtab keytab file on the machine. The dced process recognizes the
keytab file by the entry name self. In the commands, password is the
password of the DCE identity to which you were authenticated when you
created the principal.
# dcecp
dcecp> keytab add self -member hosts/hostname/dfsgw-server \
> key password
dcecp> keytab add self -member hosts/hostname/dfsgw-server \
> -random -registry
dcecp> exit
11 Log out as root to return to your authenticated DCE identity.
12 If your current DCE identity is not included in the
dcelocal/var/dfs/admin.bos file on the machine, either add the identity to the
file or authenticate to DCE as a principal who is included in the file. You can
use the bos lsadmin command to list the principals and groups included in
the admin.bos file:
$ dcelocal/bin/bos lasdmin -server /.:/hosts/hostname \
> -adminlist admin.bos
13 Create a simple BOS Server process named dfsgw to run the dfsgwd server
process:
$ dcelocal/bin/bos lsadmin -server /.:/hostshostname -process dfsgw \
-type simple cmd dcelocal/bin/dfsgwd
The Gateway Server process is now fully configured on the machine.

Configuring NFS Clients to Access DFS

Once you have configured at least one Gateway Server machine according to
the instructions in "Configuring Gateway Server Machines," you can
configure your NFS clients to provide access to the DFS filespace. Users
who have DCE accounts can then authenticate to DCE for authenticated
access to DFS from the NFS clients. Authenticating to DCE provides these
users with the privileges and permissions associated with their DCE
identities.
150