Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How would you go about configuring security on an NFS file share if it was impossible to edit the exports file (due to the NAS configuration not exposing it to the administrator)?

share|improve this question

3 Answers 3

It depends on the specifics of the NAS device. Some provide web management interfaces such as NetApp's FilerView which allow the admin to configure NFS and CIFS share permissions. NetApp also provides a command line filer admin interface accessible via telnet. Similar story for other NAS I've seen such as BlueArc, DataDomain and EMC.

share|improve this answer
    
It's a Buffalo TeraStation and the administrative interface is very limited and does not give me the level of control that I need. –  lintunen Dec 15 '09 at 10:15
1  
Probably not the answer you're hoping for but, you may want to investigate alternatives to Buffalo. The Buffalo support web site has multiple complaints about their NFS features and it didn't look like they had anything to offer regarding your question there on this issue. –  Fred Dec 15 '09 at 22:42
    
I was aware there would possibly be limitations as I wouldn't regard it as a professional level NAS. I have contacted support myself and they weren't able to offer me any options other than a warning that I'd void the warranty if I tried to expose the exports file. –  lintunen Dec 21 '09 at 9:31

you can manually manage shares while running (not permanent) with exportfs on a Linux NFS implementation.

share|improve this answer
1  
I'm not sure if that is a probable solution because from what I understand configuring exportfs relies on being able to configure the NFS server and the only means of configuring NFS on the NAS is via it's limited web interface. I wonder if there is any kind of 'layer' that can be used over the top to control permissions of mounted NFS shares. –  lintunen Dec 15 '09 at 10:19

In that case I'd be using a seperate network (segment / VLAN) for NAS.

We even do this with our NetApp's, albeit for performance and Jumbo Frame support.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.