From Linux NFS

Revision as of 12:02, 25 May 2005 (view source) Aurelien (Talk | contribs) ← Older edit		Revision as of 10:04, 31 May 2005 (view source) 129.185.75.9 (Talk) (→Security : krb5 setup) Newer edit →
Line 9:		Line 9:
	= Features =		= Features =
	==Security ==		==Security ==
		+
		+	NFSv4 is can be securised by three ways :
		+	*[[Enduser_doc_kerberos|Kerberos]]
		+	*SPKM
		+	*LIPKEY
		+
		+	=== Kerberos and NFSv4 ===
		+
		+	Setup instructions for kerberos/NFSv4 are [[Enduser_doc_kerberos|here]]
		+
	==Network optimisations==		==Network optimisations==
	==Interoperability==		==Interoperability==

---

Revision as of 10:04, 31 May 2005

Contents 1 NFSv4 2 Features 2.1 Security 2.1.1 Kerberos and NFSv4 2.2 Network optimisations 2.3 Interoperability 2.4 IPv6 support for the client 2.4.1 TI-RPC library 2.4.2 Kernel patches 2.4.3 User part patches 2.4.4 Related links 3 Linux configuration

NFSv4

NFSv4 is a new generation of network filesystems. It is designed to be run over internet, and so, it get this capabilities :

• Strong security
• Network optimisations
• Interoperability

Features

Security

NFSv4 is can be securised by three ways :

• Kerberos
• SPKM
• LIPKEY

Kerberos and NFSv4

Setup instructions for kerberos/NFSv4 are here

Network optimisations

Interoperability

IPv6 support for the client

Here is a short description to explain how to have an IPv6 ready client for NFSv2,v3 and v4 If you want further information about the IPv6 support design, please feel free to have a look here

TI-RPC library

The ti-rpc library is designed to replace sunrpc library. It is necessary to do Remote Procedures Calls regardless the transport used. Download the tirpc tarball: libtirpc-0.1.7.tar.bz2
Build and install:

> ./configure
> make
> make install

Kernel patches

Dowload the cumulative patch: linux-2.6.11-ALL.patch
In the kernel source directory:

> patch -p1 < linux-2.6.11-NFS-IPv6-client.patch

User part patches

Download nfs-utils tarball with IPv6 support included: util-linux-2.12-3-IPv6.tar.bz2
or
Download the util-linux-2.12 tarball: util-linux-2.12.tar.gz
Download and apply the util-linux-2.12-CITI_NFS4_ALL-3 patchset util-linux-2.12-CITI_NFS4_ALL-3.dif
In util-linux-2.12 directory:

> patch -p1 < util-linux-2.12-CITI_NFS4_ALL-3.dif

Download and apply cumulative patch for util-linux-2.12 : util-linux-2.12-IPv6.patch
In util-linux-2.12 directory:

> patch -p1 < util-linux-2.12-IPv6.patch

Build and install new nfs client commands:

> make
> make install

Related links

TI-RPC library and rpcbind support
IPv6 support in NFS (client and server general design)
Current status and download
Basic Socket Interface Extensions for IPv6 (RFC_3493)

Linux configuration