NAME

fs_exportafs - Configures export of /afs to clients of other file systems

SYNOPSIS

fs exportafs -type <exporter name> [-start <start/stop translator (on | off)>] [-convert <convert from afs to unix mode (on | off)>] [-uidcheck <run on strict 'uid check' mode (on | off)>] [-submounts <allow nfs mounts to subdirs of /afs/.. (on | off)>] [-clipags <use client-assigned PAGs (on | off)>] [-pagcb <callback clients to get creds (on | off)>] [-help]

DESCRIPTION

The fs exportafs command sets (if the -start argument is provided) or reports (if it is omitted) whether the machine can reexport the /afs file namespace to clients of an alternate network file system. To control certain features of the translation protocol, use the following arguments:

OPTIONS

-type <exporter name>

Names the alternate file system to which to reexport the /afs file namespace. The only acceptable value is nfs, in lowercase letters only.

-start <on | off>

Enables the local machine to reexport the /afs file namespace if the value is on, or disables it if the value is off. Omit this argument to report the current setting for all of the configurable parameters.

-convert <on | off>

Controls the setting of the UNIX group and other mode bits on /afs files and directories exported to the alternate file system. If the value is on, they are set to match the owner mode bits. If the value is off, the bits are not changed. If this argument is omitted, the default value is on.

-uidcheck <on | off>

Controls whether tokens can be placed in a credential structure identified by a UID that differs from the local UID of the entity that is placing the tokens in the structure.

-submounts <on | off>

Controls whether a user of the non-AFS filesystem can mount any directory in the AFS filespace other than the top-level /afs directory. If the value is on, such submounts are allowed. If the value is off, only mounts of the /afs directory are allowed. If this argument is omitted, the default value is off.

-clipags <on | off>

Turning on this option enables support for "client-assigned PAGs". With client-assigned PAGs, an NFS client can manage its own AFS pags, and inform the NFS translator machine what PAG we are using, instead of the NFS translator machine keeping track of PAGs. An NFS client machine can do this if it has the "afspag" kernel module loaded, which tracks PAGs but otherwise does not implement AFS functionality, and forwards all requests to the NFS translator machine.

You should only turn on this option if you are making use of client-assigned PAGs, and you trust the NFS client machines making use of the translator. This option is off by default.

-pagcb <on | off>

Turning on this option means that the NFS translator machine will contact new NFS clients in order to obtain their credentials and sysnames. This option can be useful so that client credentials are not lost if the translator machine is rebooted, or if an NFS client is "moved" to using a different translator. This functionality will only work with NFS clients that are also running the "afspag" kernel module.

Using this option with NFS clients not running with the "afspag" kernel module would cause long timeouts when the translator machine attempts to contact the client to obtain its credentials and sysname list. This option is off by default.

-help

Prints the online help for this command. All other valid options are ignored.

OUTPUT

If the machine is not even configured as a server of the alternate file system, the following message appears:

   Sorry, the <file_system>-exporter type is currently not supported on
   this Auristor client

If the machine is configured as a server of the alternate file system but is not currently enabled to reexport /afs to it (because the -start argument to this command is not set to on), the message is as follows:

   '<file_system>' translator is disabled

If the machine is enabled to reexport /afs, the following message precedes messages that report the settings of the other parameters.

   '<file_system>' translator is enabled with the following options:

The following messages indicate that the -convert argument is set to on or off respectively:

   Running in convert owner mode bits to world/other mode
   Running in strict unix mode

The following messages indicate that the -uidcheck argument is set to on or off respectively:

   Running in strict 'passwd sync' mode
   Running in no 'passwd sync' mode

The following messages indicate that the -submounts argument is set to on or off respectively:

   Allow mounts of /afs/.. subdirs
   Only mounts to /afs allowed

EXAMPLES

The following example shows that the local machine can export /afs to NFS client machines.

   % fs exportafs nfs
   'nfs' translator is enabled with the following options:
        Running in convert owner mode bits to world/other mode
        Running in no 'passwd sync' mode
        Only mounts to /afs allowed

The following example enables the machine as an NFS server and converts the UNIX group and other mode bits on exported /afs directories and files to match the UNIX owner mode bits.

   % fs exportafs -type nfs -start on -convert on

The following example disables the machine from reexporting /afs to NFS client machines:

   % fs exportafs -type nfs -start off

PRIVILEGE REQUIRED

The issuer must be logged in as the local superuser root.

SEE ALSO

knfs(1)

COPYRIGHT

IBM Corporation 2000. http://www.ibm.com/ All Rights Reserved.

This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.

ACKNOWLEDGEMENTS

"AFS" is a registered mark of International Business Machines Corporation, used under license. (USPTO Registration 1598389)

"OpenAFS" is a registered mark of International Business Machines Corporation. (USPTO Registration 4577045)

The "AuriStor" name, log 'S' brand mark, and icon are registered marks of AuriStor, Inc. (USPTO Registrations 4849419, 4849421, and 4928460) (EUIPO Registration 015539653).

"Your File System" is a registered mark of AuriStor, Inc. (USPTO Registrations 4801402 and 4849418).

"YFS" and "AuriStor File System" are trademarks of AuriStor, Inc.