User:Renich/HowTo/NFSv4

From FedoraProject

< User:Renich | HowTo(Difference between revisions)
Jump to: navigation, search
(changed from using # for the steps to ====)
(removed troubleshooting)
(17 intermediate revisions by 2 users not shown)
Line 1: Line 1:
= Sharing files with NFSv4 on Fedora 12 (Server -> Multi) =
+
= Sharing files with NFSv4 on Fedora 12 (Server & Client configuration) =
 +
 
 +
{{TOClimit|3}}
  
 
== Description ==
 
== Description ==
This HowTo explains how to set up the Network File System version 4 on your LAN for multiple shares. It explains, also, how to mount the "exports" on your client.
+
This HowTo explains how to set up the <code>Network File System version 4</code> on your ''LAN'' for multiple shares. It explains, also, how to mount the <code>exports</code> on your ''client''.
  
 
== Applicable to Fedora Versions ==
 
== Applicable to Fedora Versions ==
Line 8: Line 10:
  
 
== Requirements ==
 
== Requirements ==
Everything comes preinstalled on an "out-of-the-box" installation of Fedora. The following are only services.
+
The <code>nfs-utils</code> package provides what's need for both then client and the server. Usually, it comes preinstalled on an "out-of-the-box" installation of Fedora. However, to make sure it's installed run the following command. Enter your <code>root</code> password when prompted:
 +
 
 +
<pre>su -c "yum install nfs-utils"</pre>
 +
 
 +
The following are only services.
  
 
=== Server requirements ===
 
=== Server requirements ===
* nfs
+
* <code>nfs</code>
* rpc2
+
* <code>rpc2</code>
  
 
=== These are the client's requirements ===
 
=== These are the client's requirements ===
* nfs
+
* <code>nfs</code>
* nfslock
+
* <code>nfslock</code>
* rpc2
+
* <code>rpc2</code>
  
 
{{admon/note|The rpc.nfsd and rpc.rquotad services that are needed are started by the nfs service. Most of them don't need user configuration. rpc.lockd, rpc.statd and rpc.mountd are not used by NFSv4.}}
 
{{admon/note|The rpc.nfsd and rpc.rquotad services that are needed are started by the nfs service. Most of them don't need user configuration. rpc.lockd, rpc.statd and rpc.mountd are not used by NFSv4.}}
 
  
 
== Doing the Work ==
 
== Doing the Work ==
Line 26: Line 31:
 
=== Configuring the server ===
 
=== Configuring the server ===
  
==== Open up the necessary port on the firewall (port: 2049). Activate the "Security Level and Firewall" tool. You will be asked for your root password. Please enter it:  
+
* Open up the necessary ''port'' on the ''firewall'' (<code>port: 2049</code>). Activate the ''Firewall'' tool. You will be asked for your <code>root</code> password. Please enter it:
<pre>su -c "system-config-securitylevel"</pre>
+
<pre>su -c "system-config-firewall"</pre>
  
==== Activate "NFS4" and click "OK" ====
+
* Activate <code>NFS4</code> and click ''OK''.
  
==== Edit /etc/idmapd.conf. Enter your root password when prompted ====
+
* Edit <code>/etc/idmapd.conf</code>. Enter your <code>root</code> password when prompted:
 
<pre>su -c "gedit /etc/idmapd.conf"</pre>  
 
<pre>su -c "gedit /etc/idmapd.conf"</pre>  
  
==== Configure your domain name and change the users to nfsnobody ====
+
* Configure your ''domain'' name and change the users to <code>nfsnobody</code>:
 
<pre>
 
<pre>
 
[General]
 
[General]
Line 44: Line 49:
 
</pre>
 
</pre>
  
==== Start the rpcidmapd and nfslock services, then start the nfs service. Alternatively, you can use System->Administration->Services or System->Administration->Server Settings->Services GUIs. Please enter the root password when prompted ====
+
* Start the <code>rpcidmapd</code> and <code>nfslock</code> services, then start the <code>nfs</code> service. Alternatively, you can use ''System->Administration->Services'' GUI. Please enter the <code>root</code> password when prompted:
 
<pre>
 
<pre>
su -c "/sbin/service rpcidmapd start"
+
su -c "service rpcidmapd start"
su -c "/sbin/service nfslock start"
+
su -c "service nfslock start"
su -c "/sbin/service nfs start"
+
su -c "service nfs start"
 
</pre>
 
</pre>
  
==== Set rpcidmapd, nfslock, and nfs services to start on boot.Alternatively, you can use System->Administration->Services or System->Administration->Server Settings->Services GUIs. Please enter the root password when prompted ====
+
* Set <code>rpcidmapd</code>, <code>nfslock</code>, and <code>nfs</code> services to start on boot. Alternatively, you can use ''System->Administration->Services'' GUI. Please enter the <code>root</code> password when prompted:
 
<pre>
 
<pre>
su -c "/sbin/chkconfig --level 345 rpcidmapd on"
+
su -c "chkconfig --level 345 rpcidmapd on"
su -c "/sbin/chkconfig --level 345 nfslock on"
+
su -c "chkconfig --level 345 nfslock on"
su -c "/sbin/chkconfig --level 345 nfs on"
+
su -c "chkconfig --level 345 nfs on"
 
</pre>
 
</pre>
  
==== Create the dirs of the exports inside "/nfs4exports". Enter your root password when prompted ====
+
* Create the directories of the exports inside <code>/nfs4exports</code>. Enter your <code>root</code> password when prompted:
 
<pre>su -c "mkdir -p /nfs4exports/{share1,share2,share3}"</pre>
 
<pre>su -c "mkdir -p /nfs4exports/{share1,share2,share3}"</pre>
  
==== Edit /etc/fstab ====
+
* Edit <code>/etc/fstab</code>:
 
<pre>su -c "gedit /etc/fstab"</pre>
 
<pre>su -c "gedit /etc/fstab"</pre>
  
==== Bind the desired shares to the, recently created, dirs at /nfs4exports ====
+
* ''Bind'' the desired ''shares'' to the, recently created, directories; at <code>/nfs4exports</code>:
 
<pre>
 
<pre>
 
/path/to/share1 /nfs4exports/share1 none bind 0 0
 
/path/to/share1 /nfs4exports/share1 none bind 0 0
Line 71: Line 76:
 
</pre>
 
</pre>
  
==== Remount everything. Enter your root password when prompted ====
+
* ''Remount'' everything. Enter your <code>root</code> password when prompted:
 
<pre>su -c "mount -a"</pre>
 
<pre>su -c "mount -a"</pre>
  
==== Edit /etc/exports. Enter your root password when prompted ====
+
* Edit <code>/etc/exports</code>. Enter your <code>root</code> password when prompted:
 
<pre>su -c "gedit /etc/exports"</pre>
 
<pre>su -c "gedit /etc/exports"</pre>
  
==== Add your shares here (available to your home network) If you want your shares to be read only, change "rw" to "ro" from these statements ====
+
* Add your shares here (available to your home network) If you want your shares to be ''read only'', change <code>rw</code> to <code>ro</code> from these statements:
 
<pre>
 
<pre>
 
/nfs4exports 192.168.1.0/255.255.255.0(rw,insecure,no_subtree_check,nohide,fsid=0)
 
/nfs4exports 192.168.1.0/255.255.255.0(rw,insecure,no_subtree_check,nohide,fsid=0)
Line 85: Line 90:
 
</pre>
 
</pre>
  
==== Reload your exports. Please enter your root password when prompted ====
+
* Reload your exports. Please enter your <code>root</code> password when prompted:
 
<pre>su -c "/usr/sbin/exportfs -rv"</pre>
 
<pre>su -c "/usr/sbin/exportfs -rv"</pre>
  
==== Edit your /etc/hosts.allow file, so your clients are allowed to access your nfs. Please enter your root password when prompted ====
+
* Edit your <code>/etc/hosts.allow</code> file, so your clients are allowed to access your nfs. Please enter your <code>root</code> password when prompted:
 
<pre>su -c "gedit /etc/hosts.allow"</pre>
 
<pre>su -c "gedit /etc/hosts.allow"</pre>
  
==== Allow your LAN to access your services ====
+
* Allow your LAN to access your services:
 
<pre>rpcbind: 192.168.1.0/255.255.255.0</pre>
 
<pre>rpcbind: 192.168.1.0/255.255.255.0</pre>
  
==== Reboot ====
+
* <code>Reboot</code>:
 
<pre>su -c "/sbin/shutdown -r now"</pre>
 
<pre>su -c "/sbin/shutdown -r now"</pre>
  
 
=== Configuring the clients ===
 
=== Configuring the clients ===
==== Edit /etc/idmapd.conf. Enter your root password when prompted ====
+
* Edit <code>/etc/idmapd.conf</code>. Enter your <code>root</code> password when prompted:
 
<pre>su -c "gedit /etc/idmapd.conf"</pre>
 
<pre>su -c "gedit /etc/idmapd.conf"</pre>
  
==== Configure your domain name and change the users to nfsnobody ====
+
* Configure your domain name and change the users to <code>nfsnobody</code>:
 
<pre>
 
<pre>
 
[General]
 
[General]
Line 111: Line 116:
 
</pre>
 
</pre>
  
==== Edit /etc/fstab. Please enter your root password when prompted ====
+
* Edit <code>/etc/fstab</code>. Please enter your <code>root</code> password when prompted:
 
<pre>su -c "gedit /etc/fstab"</pre>
 
<pre>su -c "gedit /etc/fstab"</pre>
  
==== Create the mounting dirs ====
+
* Create the mounting directories:
 
<pre>su -c "mkdir /mnt/shares /home/me/share1 /home/he/share2 /home/it/share3"</pre>
 
<pre>su -c "mkdir /mnt/shares /home/me/share1 /home/he/share2 /home/it/share3"</pre>
  
==== Add the desired shares ====
+
* Add the desired shares:
 
<pre>
 
<pre>
<ip-address-to-server>:/ /mnt/shares nfs4 rsize=8192,wsize=8192,timeo=14,intr
+
<ip-address-to-server>:/ /mnt/shares nfs4 rsize=8192,wsize=8192,timeo=14,soft
<ip-address-to-server>:/ /home/me/share1 nfs4 rsize=8192,wsize=8192,timeo=14,intr
+
<ip-address-to-server>:/share1 /home/me/share1 nfs4 rsize=8192,wsize=8192,timeo=14,soft
<ip-address-to-server>:/ /home/he/share2 nfs4 rsize=8192,wsize=8192,timeo=14,intr
+
<ip-address-to-server>:/share2 /home/he/share2 nfs4 rsize=8192,wsize=8192,timeo=14,soft
<ip-address-to-server>:/ /home/it/share3 nfs4 rsize=8192,wsize=8192,timeo=14,intr
+
<ip-address-to-server>:/share3 /home/it/share3 nfs4 rsize=8192,wsize=8192,timeo=14,soft
 
</pre>
 
</pre>
  
==== Remount everything ====
+
* Remount everything:
 
<pre>su -c "mount -a"</pre>
 
<pre>su -c "mount -a"</pre>
 
== Troubleshooting==
 
  
 
== How to test ==
 
== How to test ==
Line 134: Line 137:
  
 
== Common problems and fixes ==
 
== Common problems and fixes ==
Later...
+
 
 +
=== Exported subdirectory appears empty ===
 +
 
 +
If <code>/nfs4exports/share1</code> appears empty on the client make sure it's exported with the <code>nohide</code> parameter. Because <code>/nfs4exports/share1</code> was mounted under <code>/nfs4exports</code>, the client can't see it unless the <code>nohide</code> parameter is used.
  
 
== More Information ==
 
== More Information ==
Line 140: Line 146:
  
 
== Disclaimer ==
 
== Disclaimer ==
I haven't had te opportunity to test this HowTo since I lack of a networked PC to do it, so you may run into problems, if you do, come to ====fedora on irc.freenode.net or leave me messages so I know what's up. Feel free to propose changes and stuff.
+
I haven't had the opportunity to test this HowTo since I lack of a networked PC to do it, so you may run into problems, if you do, come to [irc://irc.freenode.net/fedora #fedora on irc.freenode.net] or leave me messages so I know what's up. Feel free to propose changes and stuff.
  
 
== Added Reading ==
 
== Added Reading ==
http://www.redhat.com/docs/manuals/enterprise/RHEL-5-manual/Network_Related_Configuration/ch-nfs.html
+
* http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Deployment_Guide/ch-nfs.html
http://www.brennan.id.au/19-Network_File_System.html
+
* http://www.brennan.id.au/19-Network_File_System.html
 +
 
 +
[[Category: How_to]]

Revision as of 08:58, 3 June 2011

Sharing files with NFSv4 on Fedora 12 (Server & Client configuration)

Description

This HowTo explains how to set up the Network File System version 4 on your LAN for multiple shares. It explains, also, how to mount the exports on your client.

Applicable to Fedora Versions

  • Fedora 12

Requirements

The nfs-utils package provides what's need for both then client and the server. Usually, it comes preinstalled on an "out-of-the-box" installation of Fedora. However, to make sure it's installed run the following command. Enter your root password when prompted:

su -c "yum install nfs-utils"

The following are only services.

Server requirements

  • nfs
  • rpc2

These are the client's requirements

  • nfs
  • nfslock
  • rpc2
Note.png
The rpc.nfsd and rpc.rquotad services that are needed are started by the nfs service. Most of them don't need user configuration. rpc.lockd, rpc.statd and rpc.mountd are not used by NFSv4.

Doing the Work

Configuring the server

  • Open up the necessary port on the firewall (port: 2049). Activate the Firewall tool. You will be asked for your root password. Please enter it:
su -c "system-config-firewall"
  • Activate NFS4 and click OK.
  • Edit /etc/idmapd.conf. Enter your root password when prompted:
su -c "gedit /etc/idmapd.conf"
  • Configure your domain name and change the users to nfsnobody:
[General]
Domain = example.com

[Mapping]
Nobody-User = nfsnobody
Nobody-Group = nfsnobody
  • Start the rpcidmapd and nfslock services, then start the nfs service. Alternatively, you can use System->Administration->Services GUI. Please enter the root password when prompted:
su -c "service rpcidmapd start"
su -c "service nfslock start"
su -c "service nfs start"
  • Set rpcidmapd, nfslock, and nfs services to start on boot. Alternatively, you can use System->Administration->Services GUI. Please enter the root password when prompted:
su -c "chkconfig --level 345 rpcidmapd on"
su -c "chkconfig --level 345 nfslock on"
su -c "chkconfig --level 345 nfs on"
  • Create the directories of the exports inside /nfs4exports. Enter your root password when prompted:
su -c "mkdir -p /nfs4exports/{share1,share2,share3}"
  • Edit /etc/fstab:
su -c "gedit /etc/fstab"
  • Bind the desired shares to the, recently created, directories; at /nfs4exports:
/path/to/share1		/nfs4exports/share1	none	bind	0 0
/path/to/share2		/nfs4exports/share2	none	bind	0 0
/path/to/share3		/nfs4exports/share3	none	bind	0 0
  • Remount everything. Enter your root password when prompted:
su -c "mount -a"
  • Edit /etc/exports. Enter your root password when prompted:
su -c "gedit /etc/exports"
  • Add your shares here (available to your home network) If you want your shares to be read only, change rw to ro from these statements:
/nfs4exports			192.168.1.0/255.255.255.0(rw,insecure,no_subtree_check,nohide,fsid=0)
/nfs4exports/share1		192.168.1.0/255.255.255.0(rw,insecure,no_subtree_check,nohide)
/nfs4exports/share2             192.168.1.0/255.255.255.0(rw,insecure,no_subtree_check,nohide)
/nfs4exports/share3             192.168.1.0/255.255.255.0(rw,insecure,no_subtree_check,nohide)
  • Reload your exports. Please enter your root password when prompted:
su -c "/usr/sbin/exportfs -rv"
  • Edit your /etc/hosts.allow file, so your clients are allowed to access your nfs. Please enter your root password when prompted:
su -c "gedit /etc/hosts.allow"
  • Allow your LAN to access your services:
rpcbind: 192.168.1.0/255.255.255.0
  • Reboot:
su -c "/sbin/shutdown -r now"

Configuring the clients

  • Edit /etc/idmapd.conf. Enter your root password when prompted:
su -c "gedit /etc/idmapd.conf"
  • Configure your domain name and change the users to nfsnobody:
[General]
Domain = example.com

[Mapping]
Nobody-User = nfsnobody
Nobody-Group = nfsnobody
  • Edit /etc/fstab. Please enter your root password when prompted:
su -c "gedit /etc/fstab"
  • Create the mounting directories:
su -c "mkdir /mnt/shares /home/me/share1 /home/he/share2 /home/it/share3"
  • Add the desired shares:
<ip-address-to-server>:/	/mnt/shares	nfs4	rsize=8192,wsize=8192,timeo=14,soft
<ip-address-to-server>:/share1	/home/me/share1	nfs4	rsize=8192,wsize=8192,timeo=14,soft
<ip-address-to-server>:/share2	/home/he/share2	nfs4	rsize=8192,wsize=8192,timeo=14,soft
<ip-address-to-server>:/share3	/home/it/share3	nfs4	rsize=8192,wsize=8192,timeo=14,soft
  • Remount everything:
su -c "mount -a"

How to test

Next time...

Common problems and fixes

Exported subdirectory appears empty

If /nfs4exports/share1 appears empty on the client make sure it's exported with the nohide parameter. Because /nfs4exports/share1 was mounted under /nfs4exports, the client can't see it unless the nohide parameter is used.

More Information

RedHat recommends, on RHEL5 Docs, that one should use automount instead of /etc/fstab; which saves resources when sharing to multiple workstations. I haven't had the time to try this configuration. This document will be modified/augmented once I've got the hang of it.

Disclaimer

I haven't had the opportunity to test this HowTo since I lack of a networked PC to do it, so you may run into problems, if you do, come to #fedora on irc.freenode.net or leave me messages so I know what's up. Feel free to propose changes and stuff.

Added Reading