Follow

About this task

This task provides a client with access to the filesystem.

The instructions below apply to:

  • Filesystems
  • Filesystem snapshots

Prerequisites

  • A host, an IP address, or a range of IP addresses
  • A filesystem export or a filesystem snapshot export

Instructions

  1. In the GUI, click the Datasets icon on the left toolbar.
  2. Do one of the following:
    • For a filesystem: Select the export path, and click the Exports tab.
    • For a filesystem snapshot: Expand the filesystem tree, select the filesystem snapshot name, and click the Exports tab.
  3. Select the export path.
    The Export Permissions window opens in the right pane.
  4. To add a new rule, click Add Rule. A rule is added with the following default settings:
    • Client - * (all clients)
    • Access - Read/Write
    • Root access - no
  5. You can modify a rule to apply it to specific clients.
    1. To apply a rule to a specific client: In the Client column, overwrite the current value with an IP address, for example: 10.0.0.1
    2. To apply a rule to a network range: In the Client column, overwrite the current value with the first and last IP address of a range, for example: 10.0.0.1-10.0.0.5
    3. To apply a rule to all clients: Enter *
  6. Select the appropriate access level and whether to allow root access. See below.
  7. Click Done.

Available access rights

The client is assigned one of the following access rights:

  • Access - one of the following:
    • RO: read-only
    • RW: read/write
  • Root access - one of the following:
    • permitted
    • not permitted - This sets the export to root-squash

These access rights are only for the export. Access rights to the filesystem itself are set by the InfiniBox admin. See: Overview of user management

Permission rule enforcement

If a client matches multiple rules, the most permissive rule takes precedence.

  • Between RW and RO, RW wins.
  • If any rule allows root access, then root access is allowed.

Note that the "winner" of the Access setting and "winner" of the Root Access setting can be from different rules.

For example, if the following rules are defined :

Client

Access

Root

10.0.0.1-32ROYes
10.0.0.4RWNo
10.0.0.5RWYes

Then the root account on client 1.0.0.4 would be allowed RW access, as the client matches the first rule which allows root access.

Related tasks

This task and all other filesystem tasks are available on both the GUI and InfiniShell.

Related InfiniShell commands

  • fs.export.permission.add - adding a permission to an export
  • fs.export.permission.modify - modifying attributes of a permission
  • fs.export.permission.query - querying for the permission attributes of an export
  • fs.export.permission.remove - removing a permission from an export
Was this article helpful?
0 out of 0 found this helpful

0 out of 0 found this helpful

Last edited: 2021-11-23 17:16:51 UTC

Comments