How Solaris matches names in NFS exports
April 18, 2006
Recently, I accidentally found out which of two options Solaris uses for matching names in NFS exports. As traditional, I did this by stubbing my toe.
Given a name in an
(And when I wrote software that did tcpwrappers-style permissions checks I put in options to do both sorts of verification, which came in handy more than once.)
It turns out that Solaris does
I discovered this by adding DNS name resolution to a system that was
NFS-exporting filesystems using a
When I added DNS name resolution to
(I can be sure it was doing the IP to name check because a DNS lookup was
happy to turn a plain 'backup' into the right IP address, due to an
The bonus embarrassment is that our Linux nfsswitch.conf configuration is careful to check files before DNS, for much the same reason. I just didn't think about the issue when I was making the change on the Solaris machine.
Comments on this page:
* * *
Atom feeds are available; see the bottom of most pages.