Arthur Darren Dunham <add@netcom.com> provided me with the correct answer.
He told me that "NFS has always been authenticated at mount time, rather
than access time." but mentioned that "2.6 changed that and added hostname
checks at file access time rather than just mount time."
I wanted to upgrade to Solaris 7 anyways, so I did, and now the clients
get an RPC authentication errors when they try to access shares once their
hostname has been removed from /etc/dfs/dfstab. Once the clients reboot,
they get the normal Permission denied at mount time.
Special thanks to all who replied:
Stephen Wolthusen <stephen@wolthusen.com>
Arthur Darren Dunham <add@netcom.com>
Dave Foster <foster@bial1.ucsd.edu>
Danny Johnson <djohnson@nbserv1.rsc.raytheon.com>
Mark <bloch@enteract.com>
Kris Briscoe <r8465c@email.sps.mot.com>
Daniel Polombo <daniel.polombo@detexis.thomson-csf.com>
Original question:
Hello,
I have a server (Solaris 2.5.1) that was exporting six shares to a
hundred or so machines that I would like to limit to just a handful of
hosts now. I updated the /etc/dfs/dfstab to limit mounting of the shares
to a few select hosts, then unshared the drives and shared them again.
This made the clients hang for a bit, but hosts no longer on the list were
still able to use the shares. If I went to the clients and unmounted the
drives I couldn't re-mount them, but machines with existing mounts are
still able to use the shares. How can I force the clients no longer in my
dfstab to unmount the drives? I cannot go to each workstation because I
don't have access to them, and I don't know the physically location of
most of the machines.
-- David Carlin -- djc6@po.cwru.edu | Unix Administrator, EECS Dept. | Case Western Reserve University | Office: Olin 414 10900 Euclid Ave | Phone: (216) 368-0355 Cleveland, OH 44106-7071 | Fax: (216) 368-6888
This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:13:24 CDT