Exporting a file system using Secure Network File System

You can export a secure NFS by using one of the following procedures.

  • To export a secure NFS file system using SMIT, perform the following steps:
    1. Verify that NFS is already running by running the lssrc -g nfs command. The output indicates that the nfsd and the rpc.mountd daemons are active.
    2. Verify that the publickey map exists and that the keyserv daemon is running. For more information, see Configuring secure Network File System.
    3. Run the smit mknfsexp fast path.
    4. Specify the appropriate values for the PATHNAME of directory to export, MODE to export directory, and EXPORT directory now, system restart or both fields. Specify yes for the Use SECURE option field.
    5. Specify any other optional characteristics, or accept the default values.
    6. Exit SMIT. If the /etc/exports file does not exist, it will be created.
    7. Repeat steps 3 through 6 for each directory you want to export.
  • To export a secure NFS file system by using a text editor, perform the following steps:
    1. Open the /etc/exports file with your favorite text editor.
    2. Create an entry for each directory to be exported, using the full path name of the directory. List each directory to be exported starting in the left margin. No directory should include any other directory that is already exported. See the /etc/exports file documentation for a description of the full syntax for entries in the /etc/exports file, including how to specify the secure option.
    3. Save and close the /etc/exports file.
    4. If NFS is currently running, type:
      /usr/sbin/exportfs -a
      Using the -a option with the exportfs command sends all information in the /etc/exports file to the kernel.
  • To export an NFS file system temporarily (that is, without changing the /etc/exports file), type:
    exportfs -i -o secure /dirname

    where dirname is the name of the file system you want to export. The exportfs -i command specifies that the /etc/exports file is not to be checked for the specified directory, and all options are taken directly from the command line.