man rpc.mountd (Administration système) - NFS mount daemon
NAME
mountd - NFS mount daemon
SYNOPSIS
/usr/sbin/rpc.mountd [ -f exports-file ] [ -d facility ] [ -P port ] [ -Dhnprv ] [ --debug facility ] [ --exports-file=file ] [ --help ] [ --allow-non-root ] [ --re-export ] [ --no-spoof-trace ] [ --version ]
DESCRIPTION
The mountd program is an NFS mount daemon. When receiving a MOUNT request from an NFS client, it checks the request against the list of exported file systems listen in /etc/exports. If the client is permitted to mount the file system, mountd creates a file handle for the requested directory, and adds an entry /etc/rmtab. Upon receipt of an UMOUNT request, it removes the client's entry from rmtab. Note, however, that a client may still be able to use the file handle after the UMOUNT request (for instance, if the client mounts the same remote file system on two different mount points). Similarly, if a client reboots without notifying mountd, a stale entry will remain in rmtab.
Running from inetd
mountd can be started from inetd rather than at system boot time by adding the following two lines to /etc/inetd.conf:
mount/1-2 dgram rpc/udp wait root /usr/sbin/rpc.mountd rpc.mountd mount/1-2 stream rpc/tcp wait root /usr/sbin/rpc.mountd rpc.mountd
When run from inetd, mountd will terminate after a certain period of inactivity.
OPTIONS
- -f or --exports-file
- This option specifies the exports file, listing the clients that this server is prepared to serve and parameters to apply to each such mount (see exports(5)). By default exports are read from /etc/exports.
- -d or --debug
- Log each transaction verbosely to standard error. Valid log facilities are call for the logging of all calls, auth for client authentication, fhcache for operations of the file handle cache, and rmtab for manipulation of /etc/rmtab. By default, log output is sent to syslogd unless the daemon runs in the foreground.
- -F or --foreground
- Unlike normal in operation, mountd will not detach from the terminal when given this option. When debugging is requested, it will be sent to standard error.
- -h or --help
- Provide a short help summary.
- -n or --allow-non-root
- Allow incoming mount requests to be honored even if they do not originate from reserved IP ports. Some older NFS client implementations require this. Some newer NFS client implementations don't believe in reserved port checking.
- -P portnum or --port portnum
- Makes mountd listen on port portnum instead of some random port. By default, mountd will listen on the mount/udp port specified in /etc/services, or, if that is undefined, on some arbitrary port number below 1024.
- -p or --promiscuous
- Put the server into promiscuous mode where it will serve any host on the network.
- -r or --re-export
- Allow imported NFS or SMB file-systems to be exported. This can be used to turn a machine into an NFS/SMB multiplier. Caution should be used when re-exporting loopback mounts because re-entering the mount point will result in deadlock between the client file system code and the server.
- -t or --no-spoof-trace
- By default, mountd logs every access by unauthorized clients. This option turns off logging of such spoof attempts for all hosts listed explicitly in the exports file.
- -v or --version
- Report the current version number of the program.
Access Control
For enhanced security, access to mountd can be limited via the TCP wrapper library that's part of Wietse Venema's tcp_wrappers package. Support for this option must be selected at compile time. In order to restrict access to all hosts on your local network (say 192.168.1.0), you would add the following lines to your /etc/hosts.allow file:
"rpc.mountd : 192.168.1. : allow "rpc.mountd : ALL : deny
This example assumes your TCP wrapper library was compiled with options support (which I highly recommend). If it has been compiled without options support, you need to add the following two lines to /etc/hosts.allow and /etc/hosts.deny, respectively:
"# hosts.allow: "rpc.mountd : 192.168.1 "# hosts.deny "rpc.mountd : ALL
When changing this information, you must restart mountd for these changes to take effect, either by killing and restarting, or by sending it the HUP signal.
BUGS
The information in /etc/rmtab is inaccurate more often than not.
SIGNALS
When receiving a SIGHUP, mountd will re-read the exports file and any access restrictions defined in the /etc/hosts.allow and /etc/hosts.deny file. Note that to make export changes take effect, you have to send nfsd a SIGHUP as well.
FILES
/etc/exports
/etc/rmtab