Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have several client computers (PCs) that need to connect to DRBD-replicated NFS servers. With NFS, I know you need to have the connection configured on both machines (e.g. client -> server and server -> client).

To avoid having to mess with configuration settings every time I add a new client to the network, I'm going to create an image with the appropriate settings to access the NFS share. However, I still need to figure out a way to get the server to automatically accept new client IPs in a secure manner.

Is that possible? Or, does this setup require manual intervention each time I bring a new client on (e.g. log into NFS and add IP of new client)?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

I think that if you can afford to automatically accept new clients and add them to /etc/exports, from a security perspective you can also afford allowing access to an entire network or address range. Remember that you can use wildcard hostnames in /etc/exports like *.cs.foo.edu, as stated in man 5 exports.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.