Adding an NFS Share Client

Prerequisites

• You have obtained required data for configuring an NFS share.
• You have configured an DNS server or configured storage and service planes and added them to an LDAP or NIS domain if you need to add a client whose Type is Host.
• You have created a network group name available on the LDAP or NIS server if you need to add a client whose Type is Network group.
• You have refreshed the cache of all storage nodes if you need to add a client whose Type is Network group. To refresh cache, run the following command:

  nas_proto_auth -c update-namesrv-cache -s source{0:Local 1:DNS 2:AD 3:LDAP 4:NIS} -t type{0:Host 1:Netgroup 2:UnixUser 3:UnixGroup} [-z tenantid]

  Example: nas_proto_auth -c update-namesrv-cache -s 3 -t 1 -z 0

Procedure

1. Choose Services > File Service > Share > NFS Share.
2. Click More on the right of the desired NFS share and select Add Client.

   The Add Client page is displayed.

   

   You can also click the path of the desired NFS share. On the page that is displayed, click Add in the Permission area.

3. Set client properties.

   Table 1 describes related parameters.

   Table 1 Client parameters

   Parameter	Description
   Type	Indicates the client type of the NFS share. NOTE: When a client is included in multiple share permissions, the priority of share authentication from high to low is in the following sequence: host name > IP address > network segment > wildcard > network group > *.
   Name or IP Address	When Type is set to Host, enter host names or service IP addresses of the clients to be added to the NFS share. When Type is set to Network group, enter the network group names configured in the LDAP or NIS domain. NOTE: You can enter multiple host names, IP addresses, or network group names separated by semicolons (;), spaces, or carriage returns. A host name: Contains 1 to 255 letters, including letters, digits, hyphens (-), periods (.), and underscores (_). Must start with a letter or digit and cannot end with a hyphen (-) or underscore (_). Cannot contain a combination of a period and underscore (_. or ._), a combination of a period and hyphen (-. or .-), consecutive periods (..), or pure digits. For IP addresses: You can enter client IP addresses, client IP address segments, or an asterisk (*) to represent IP addresses of all clients. IPv4 addresses are supported. The mask of an IPv4 address ranges from 1 to 32. A network group name: Contains 1 to 254 characters. Can contain only letters, digits, underscores (_), hyphens (-), and periods (.).
   Permission Level	Indicates the permission level for the clients to access the NFS share. Possible options are as follows: Read-only: The clients can only read files in the NFS share. Read/Write: The clients can read and write files in the NFS share.

4. Modify advanced client parameters. Select Advanced in the upper right corner.
   Table 2 describes related parameters.

   Table 2 Advanced client parameters

   Parameter	Description
   Write Mode	Indicates how the system writes data onto disks. Sync: writes data onto disks instantly. Async: responds to the client's requests first and then writes data onto disks. NOTE: If the value is set to Async, data may be lost when the client and storage system are faulty at the same time. This parameter is displayed only when Permission Level is set to Read/Write.
   Permission Constraint	Indicates whether to retain the user ID (UID) and group ID (GID) of a shared directory. all_squash: The UID and GID of a shared directory are mapped to user nobody, which is applicable to public directories. no_all_squash: retains the UID and GID of a shared directory.
   root Permission Constraint	Controls the root permission of the client. root_squash: does not allow a client to access the share as user root. Otherwise, the client will be mapped as an anonymous user. no_root_squash: allows a client to access the share as user root that has full control and access permissions for shared directories. NOTE: If a VM needs to be created in the NFS share, select no_root_squash. Otherwise, the VM may run abnormally.
   Source Port Verification Constraint	Indicates whether to enable source port verification. secure: allows a client to access the NFS share using ports 1 to 1023. insecure: allows a client to access the NFS share using any port.

5. Click OK.