Brent A Nelson
2006-Jun-18 11:18 UTC
[Lustre-discuss] Client access control in Lustre 1.6beta?
How does one control client access to Lustre 1.6beta servers? Thanks, Brent
Nathaniel Rutman
2006-Jun-18 11:18 UTC
[Lustre-discuss] Client access control in Lustre 1.6beta?
There is no restriction on client access (/etc/exports equivalent) in any version of Lustre. If necessary it is possible to set up IP firewall rules to block clients from connecting to port 988, but this doesn''t work for non-IP clients. The client entries in config.xml files are used only for writing configuration logs, not for access restrictions. You can zeroconf mount a 1.4.x client from any node that has network access. Permissions are only controlled at the file level. Brent A Nelson wrote:>I mean how do you restrict client machine access to your Lustre servers? >This is certainly possible in Lustre 1.4.x and earlier (the client= entry >specifying which machines can connect as a client of your Lustre >filesystem). In other words, how do you do the equivalent of >/etc/exports? > >Thanks, > >Brent > >On Mon, 12 Jun 2006, Nathaniel Rutman wrote: > > > >>Brent A Nelson wrote: >> >> >> >>>How does one control client access to Lustre 1.6beta servers? >>> >>>Thanks, >>> >>>Brent >>>_______________________________________________ >>>Lustre-discuss mailing list >>>Lustre-discuss@clusterfs.com >>>https://mail.clusterfs.com/mailman/listinfo/lustre-discuss >>> >>> >>Permissions are controlled to files or directories via unix file >>permissions and ACLs. >> >> >> >> > > >