NFS version 4 changing export properties

250 pts.
Tags:
NFS
NFS Storage
NFSv4
OS/400
Hi, can someone describe which will be the impact when i will change the NFS Export Properties to NFSv4 (see Advanced - NFS version supported for connections) and what about the security options? Should i unexport the folder before making the change? NFSv4 will impact the user's access to shared item? Thanks for your Help.

Software/Hardware used:
os400

Answer Wiki

Thanks. We'll let you know when a new response is added.

it’s for OS400 and i need to make the change through the iSeries Navigator. Thanks

Discuss This Question: 4  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • TomLiotta
    i need to make the change... I'd assume that someone already knows the answers if you "need" to do this. Are you intending to remove the 'System authentication' option? If not, then things should appear to run differently except some new connections will become allowed through Kerberos authentication. But if you disable 'System authentication', I'd expect that all connections will be forced to be handled through your Kerberos service. Although this is tagged as "OS/400", NFSv4 isn't supported by OS/400. You need at least i5/OS 6.1 for NFSv4, and you might even need i 7.1 for Kerberos 5. I'll have to check how Krb5 is enabled at 6.1. ("OS/400" is a small nit to pick. Not really important, but it helps clarify your environment.) Regardless, what OS version/release are you running? Are you also reasonably up to date on your PTF groups? If you will be changing an existing export, I'd certainly expect that it should be unmounted first. Most likely, the internal structures are populated when you bring an export active. Tom
    125,585 pointsBadges:
    report
  • junioras400
    Hi Tom, i received this change request from one application support but i need to be sure what will be the impact, i'm afraid that this change will cause user's access problem to shared directories. OS400 : V6R1M0 and we are up to date with the latest PTF group, Cum, etc. I will keep system authentication and no Kerberos authentication. Do you think this will change anything for users? I checked many internet sites but i didn't find information about impact when the change is done. Thank you Tom for your help .
    250 pointsBadges:
    report
  • TomLiotta
    This capability is recent enough (and unreferenced enough) that the level of confidence can't be high. If you can ask IBM and get a good answer, you'll immediately become one of the top people in the user community. We'll start asking you questions about NFSv4. However, it looks as if you can enable NFSv4 for the mount with no impact on any current NFS clients. That would be done by not disabling NFSv2 and/or NFSv3 for the same mount and also leaving existing authentication methods in place. That is, leave all other check-boxes as they are if any are checked in the iSeries Navigator 'NFS Export' Properties. Apparently, if you leave the previous NFSv2 and/or NFSv3 properties checked or if you add them when not already checked, the export will continue to support all previous behaviors. I'd still do this when the export is unmounted. Also, take care not to mess with the 'NFS Root' and 'NFS Public' settings unless you know that you want to set those. You might want to review 'NFS Root'. It's possible that the export should reasonably be the NFS root, but you'll have to work that out. Also, don't ignore the green-screen 'help' text for the STRNFSSVR command. There's almost as much info you can take from there as you can from the iNav 'help' and elsewhere. You might print the full extended 'help' and read it. Also, a minor correction: If not, then things should appear to run differently except some new connections will become allowed through Kerberos authentication. Should be: If not, then things should not appear to run differently except some new connections will become allowed through Kerberos authentication. At the moment, it doesn't look as if simply adding NFSv4 will be noticed by anyone. Only removal of any current capabilities should be of concern. Tom
    125,585 pointsBadges:
    report
  • junioras400
    Hi Tom, Thank you for the information it's really helpful. i will give you a feedback if i get something from IBM. Thank you.
    250 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following