How to change Data Container export to root squash

Elastifile default export setting is "No User Mapping" - the result is that every client is working with his original UIG/GID including root.

This result is called in NFS - no_root_squash, and means that local client root will stay root on the Elastifile file system.

To block all client local root from having super user permission on the Elastifile file system we will need to change the Data Container default share permissions.

Steps to Enable root_squash

1) Login into Elastifile UI as admin 

Login

2) Goto DATA CONTAINERS screen 

DATA CONTAINERS

3) Click the relevant Data Container 

Relevant Data Container

4) Click on the default root (/) share 

Default Root share

5) Change "User Mappings" to "Map Root To" 

User Mappings

6) Change "USER ID" to nobody  

UserID

7) Save 

Save

Currently the / share (export) is root_squash, each NFS client, root user, will have no permissions on the Elastifile file system.

It is very common to have admin workstations / subnets, with root permission to manage the Elastifile file system.

Steps to Enable Root Access for Specific Clients

Here is a small procedure to enable root access for specific clients 

1) Login into Elastifile UI as admin 

Login

2) Goto DATA CONTAINERS screen 

DATA CONTAINERS

3) Click the relevant Data Container 

Relevant Data Container

4) Click on the default root (/) share

Root Share

5) Click on "Client's Access" 

Client's Access

6) Add admin client / subnet , mark him as "Privileged Client" and click "ADD"  

Privileged Client

7) Press "SAVE"

Save

After you made the above changes the specified IP's / Subnets , will have root (no_root_squash) access to the Elastifile file system

Was this helpful?
How can we improve it?
true
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
false
false
false
false