To allow file transfers in and out of dCache using NFSv4.1/pNFS, a
new NFSv4.1 doorNFS clients.
To enable the NFSv4.1 doornfs within the domain that you want to run it by adding the
following line
.. [<domainName>/nfs] nfs.version = 4.1 ..
Example:
You can just add the following lines to the layout file:
..
[nfs-${host.name}Domain]
[nfs-${host.name}Domain/nfs]
nfs.version = 4.1
..
In addition to run an NFSv4.1 door/etc/exports file. The format of /etc/exports
is similar to the one which is provided by Linux:
# <path> [host [(options)]]
Where <options> is a comma separated combination of:
romatching clients can access this export only in read-only mode
rwmatching clients can access this export only in read-write mode
sec=krb5matching clients must access
NFSusing RPCSEC_GSS authentication. The Quality of Protection (QOP) is NONE, e.g., the data is neither encrypted nor signed when sent over the network. Nevertheless the RPC packets header still protected by checksum.sec=krb5imatching clients have to access
NFSusing RPCSEC_GSS authentication. The Quality of Protection (QOP) is INTEGRITY. The RPC requests and response are protected by checksum.sec=krb5pmatching clients have to access
NFSusing RPCSEC_GSS authentication. The Quality of Protection (QOP) is PRIVACY. The RPC requests and response are protected by encryption.
For example:
Example:
# /pnfs/dcache.org/data *.dcache.org (rw,sec=krb5i)
Notice, that security flavour used at mount time will be used for client - pool comminication as well.