| Message ID | 4DD66EC6.7090706@moving-picture.com (mailing list archive) |
|---|---|
| State | New, archived |
| Headers | show |
On Fri, May 20, 2011 at 02:38:14PM +0100, James Pearson wrote: > J. Bruce Fields wrote: > >>Having a priority option would be a very good idea - and may be in > >>the meantime the exports man page should be updated with info about > >>the current priority ordering? > > > > > >Sounds good. Could you send in a patch? > > Here's an attempt - based on the info from Max Matveev > <makc@redhat.com> earlier in this thread > > James Pearson > > --- exports.man.dist 2010-09-28 13:24:16.000000000 +0100 > +++ exports.man 2011-05-20 14:29:45.555314605 +0100 > @@ -92,6 +92,11 @@ > '''.B \-\-public\-root > '''option. Multiple specifications of a public root will be ignored. > .PP > +.SS Matched Client Priories Priorities? But could we just combine this with the previous section--and make sure the different possibilities are listed there in the correct priority order to start off with. That'd also mean adding a new subsection for the "anonymous" case. --b. > +The order in which the different \fIMachine Name Formats\fR are matched > +against clients is in the priority order: \fIhostname, IP address > or networks, > +wildcards, netgroup and anonymous\fR. Entries at the same level are matched > +in the same order in which they appear in \fI/etc/exports\fR. > .SS RPCSEC_GSS security > You may use the special strings "gss/krb5", "gss/krb5i", or "gss/krb5p" > to restrict access to clients using rpcsec_gss security. However, this > > > -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
--- exports.man.dist 2010-09-28 13:24:16.000000000 +0100 +++ exports.man 2011-05-20 14:29:45.555314605 +0100 @@ -92,6 +92,11 @@ '''.B \-\-public\-root '''option. Multiple specifications of a public root will be ignored. .PP +.SS Matched Client Priories +The order in which the different \fIMachine Name Formats\fR are matched +against clients is in the priority order: \fIhostname, IP address or networks, +wildcards, netgroup and anonymous\fR. Entries at the same level are matched +in the same order in which they appear in \fI/etc/exports\fR. .SS RPCSEC_GSS security You may use the special strings "gss/krb5", "gss/krb5i", or "gss/krb5p"