Print this page
12278 nfs-zone needs man page changes
Reviewed by: Peter Tribble <peter.tribble@gmail.com>
Reviewed by: Gordon Ross <gordon.w.ross@gmail.com>
   1 .\"
   2 .\" The contents of this file are subject to the terms of the
   3 .\" Common Development and Distribution License (the "License").
   4 .\" You may not use this file except in compliance with the License.
   5 .\"
   6 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   7 .\" or http://www.opensolaris.org/os/licensing.
   8 .\" See the License for the specific language governing permissions
   9 .\" and limitations under the License.
  10 .\"
  11 .\" When distributing Covered Code, include this CDDL HEADER in each
  12 .\" file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  13 .\" If applicable, add the following below this CDDL HEADER, with the
  14 .\" fields enclosed by brackets "[]" replaced with your own identifying
  15 .\" information: Portions Copyright [yyyy] [name of copyright owner]
  16 .\"
  17 .\"
  18 .\" Copyright 1989 AT&T
  19 .\" Copyright (c) 2004, Sun Microsystems, Inc. All Rights Reserved.
  20 .\" Copyright 2016 Nexenta Systems, Inc.

  21 .\"
  22 .Dd December 18, 2016
  23 .Dt NFS 4
  24 .Os
  25 .Sh NAME
  26 .Nm nfs
  27 .Nd NFS configuration properties
  28 .Sh DESCRIPTION
  29 The behavior of the
  30 .Xr nfsd 1M ,
  31 .Xr nfsmapid 1M ,
  32 .Xr lockd 1M ,
  33 and
  34 .Xr mountd 1M
  35 daemons and
  36 .Xr mount_nfs 1M
  37 command is controlled by property values that are stored in the Service
  38 Management Facility, smf(5).
  39 The
  40 .Xr sharectl 1M
  41 command should be used to query or change values for these properties.
  42 .Pp


 279 For example, the UID 12345 is encoded as
 280 .Li 12345 .
 281 .It
 282 .Nm nfsmapid
 283 ignores the
 284 .Qq domain
 285 portion of the inbound attribute string and performs name service lookups only
 286 for the user or group.
 287 If the user/group exists in the local system name service databases, then the
 288 proper uid/gid will be mapped even when no domain has been configured.
 289 .Pp
 290 This behavior implies that the same administrative user/group domain exists
 291 between NFSv4 client and server (that is, the same uid/gid's for users/groups
 292 on both client and server).
 293 In the case of overlapping id spaces, the inbound attribute string could
 294 potentially be mapped to the wrong id.
 295 However, this is not functionally different from mapping the inbound string to
 296 .Sy nobody ,
 297 yet provides greater flexibility.
 298 .El










 299 .Sh SEE ALSO
 300 .Xr lockd 1M ,
 301 .Xr mount_nfs 1M ,
 302 .Xr mountd 1M ,
 303 .Xr nfsd 1M ,
 304 .Xr nfsmapid 1M ,
 305 .Xr sharectl 1M ,
 306 .Xr smf 5


   1 .\"
   2 .\" The contents of this file are subject to the terms of the
   3 .\" Common Development and Distribution License (the "License").
   4 .\" You may not use this file except in compliance with the License.
   5 .\"
   6 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   7 .\" or http://www.opensolaris.org/os/licensing.
   8 .\" See the License for the specific language governing permissions
   9 .\" and limitations under the License.
  10 .\"
  11 .\" When distributing Covered Code, include this CDDL HEADER in each
  12 .\" file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  13 .\" If applicable, add the following below this CDDL HEADER, with the
  14 .\" fields enclosed by brackets "[]" replaced with your own identifying
  15 .\" information: Portions Copyright [yyyy] [name of copyright owner]
  16 .\"
  17 .\"
  18 .\" Copyright 1989 AT&T
  19 .\" Copyright (c) 2004, Sun Microsystems, Inc. All Rights Reserved.
  20 .\" Copyright 2016 Nexenta Systems, Inc.
  21 .\" Copyright 2020 Joyent, Inc.
  22 .\"
  23 .Dd February 4, 2020
  24 .Dt NFS 4
  25 .Os
  26 .Sh NAME
  27 .Nm nfs
  28 .Nd NFS configuration properties
  29 .Sh DESCRIPTION
  30 The behavior of the
  31 .Xr nfsd 1M ,
  32 .Xr nfsmapid 1M ,
  33 .Xr lockd 1M ,
  34 and
  35 .Xr mountd 1M
  36 daemons and
  37 .Xr mount_nfs 1M
  38 command is controlled by property values that are stored in the Service
  39 Management Facility, smf(5).
  40 The
  41 .Xr sharectl 1M
  42 command should be used to query or change values for these properties.
  43 .Pp


 280 For example, the UID 12345 is encoded as
 281 .Li 12345 .
 282 .It
 283 .Nm nfsmapid
 284 ignores the
 285 .Qq domain
 286 portion of the inbound attribute string and performs name service lookups only
 287 for the user or group.
 288 If the user/group exists in the local system name service databases, then the
 289 proper uid/gid will be mapped even when no domain has been configured.
 290 .Pp
 291 This behavior implies that the same administrative user/group domain exists
 292 between NFSv4 client and server (that is, the same uid/gid's for users/groups
 293 on both client and server).
 294 In the case of overlapping id spaces, the inbound attribute string could
 295 potentially be mapped to the wrong id.
 296 However, this is not functionally different from mapping the inbound string to
 297 .Sy nobody ,
 298 yet provides greater flexibility.
 299 .El
 300 .Sh ZONES
 301 NFS can be served out of a non-global zone.
 302 All of the above documentation applies to an in-zone NFS server.
 303 File sharing in zones is restricted to filesystems a zone completely controls.
 304 Some zone brands (see
 305 .Xr brands 5 )
 306 do not give the zone's root its own filesystem, for example.
 307 Delegated ZFS datasets to a zone are shareable, as well as lofs-remounted
 308 directories.
 309 The zone must have sys_nfs privileges; most brands grant this already.
 310 .Sh SEE ALSO
 311 .Xr lockd 1M ,
 312 .Xr mount_nfs 1M ,
 313 .Xr mountd 1M ,
 314 .Xr nfsd 1M ,
 315 .Xr nfsmapid 1M ,
 316 .Xr sharectl 1M ,
 317 .Xr brands 5 ,
 318 .Xr smf 5 ,
 319 .Xr zones 5