• Red Hat Enterprise Linux 7.3
• NFS-Server
  • Hostname : system1.example.com
• NFS-Client
  • Hostname : system2.example.com

1. 패키지 설치 및 구동

[root@system1 ~]# yum install nfs-server nfs-secure
[root@system1 ~]# systemctl status nfs-secure nfs-server
[root@system1 ~]# systemctl enable nfs-server nfs-secure
[root@system1 ~]# systemctl start nfs-server nfs-secure

1. NFS 마운트 폴더 생성

// NFS 에서 사용할 mount 폴더 생성
[root@system1 ~]# mkdir /public
[root@system1 ~]# mkdir /private

1. NFS Export 설정

[root@system1 ~]# vi /etc/exports
/public     *.example.com(ro)     // ro 옵션은 Read only 
/private     *.example.com(rw,no_root_squash,sec=krb5p)     // rw 옵션은 ReadWrite, 

[root@system1 ~]# exportfs -avr     // exports 파일에서 설정한 내용 시스템에 적용
exporting *.example.com:/private
exporting *.example.com:/public

1. 방화벽 설정

[root@system1 ~]# firewall-cmd --permanent --add-service=nfs
success
[root@system1 ~]# firewall-cmd --reload
success

1. NFS-Utils 패키지 설치

[root@system2 ~]# yum install nfs-utils

1. NFS Client 에서 마운트할 디렉토리 생성

[root@system2 ~]# mkdir /mnt/nfsmount
[root@system2 ~]# mkdir /mnt/nfssecure

1. NFS 마운트 테스트

[root@system2 ~]# mount -t nfs 192.168.70.46:/public /mnt/nfsmount/
[root@system2 ~]# cd /mnt/nfsmount/
[root@system2 ~]# ls

1. /etc/fstab 설정

[root@system2 ~]# vim /etc/fstab
system1.example.com:/public  /mnt/nfsmount  nfs defaults,_netdev 0 0
system1.example.com:/private /mnt/nfssecure nfs defaults,_netdev,sec=krb5p 0 0

• rw 옵션은 Read & Write 가 가능하며, 허용된 User 에 대해서만 접근 권한이 있음
• 해당 테스트는 User “ Koov ” 유저만 rw 만 가능하게 설정하여 테스트 진행 함

System1.example.com

[root@system1 ~]# useradd koov
[root@system1 ~]# id koov
uid=1001(koov) gid=1001(koov) groups=1001(koov)
[root@system1 ~]# chown koov -R /private/
[root@system1 ~]# ls -ld /private/
drwxr-xr-x. 3 koov root 30 Jan 24 16:56 /private/

system2.example.com

[root@system2 secret]# id koov
uid=1001(koov) gid=1001(koov) groups=1001(koov)
[root@system2 ~]# mount -t nfs system1.example.com:/private /mnt/nfssecure/
[root@system2 ~]# cd /mnt/nfssecure
[root@system2 nfssecure]# whoami
root
[root@system2 nfssecure]# touch TEST.txt
touch: cannot touch ‘TEST.txt’: Permission denied

[root@system2 ~]# su - koov
Last login: Tue Jan 24 17:09:03 KST 2017 on pts/0
[koov@system2 ~]$ whoami
koov
[koov@system2 ~]$ cd /mnt/nfssecure/
[koov@system2 nfssecure]$ touch TEST.txt
[koov@system2 nfssecure]$ ls
TEST.txt