HOW TO: Use Client Groups in Server for NFS to Manage Permissions During a UNIX-to-Windows Migration

Server for NFS allows the administrator to set the mount permissions for NFS shares for groups of client computers, simplifying management. The NFS export (share) can be made available as a read-only share, a read-write share, or access can be denied for a group of computers. Root access can also be set by group.

Create Client Group in Server for NFS

NFS client computers can be logically grouped to enable the administrator to easily manage mount permissions for all the computers in a group without having to set them for individual machines. The first step in this process is creating the client groups.

To create a client group:

1. Log on to the Server for NFS computer with an administrative level account.
2. Click Start, Programs, Services for UNIX, Services for UNIX Administration to open the SFU Administrative MMC.
3. Click the Server for NFS pane. Click on the Client Groups tab.
4. In the Group Name field, type in the name for the new group and click New.
5. With the new name highlighted, click Advanced to see the clients in the group and be able to add new clients.
6. Enter a client name in the Type the name of the client machine you want to add field, and then click Add to add it to the group.
7. Continue adding client machines to the group as desired. When you have finished, click Apply to actually create the client group.

Set Mount Permissions for Client Group in Server for NFS

Mount permissions for Server for NFS shares default to read-only, no root access, for all clients. The administrator can change this, either at the time the share is created, or later.

To set the mount permissions for a shared folder:

1. Log onto the Windows server with an administrative level account.
2. Open Windows Explorer.
3. Highlight the folder you want to set the permissions for and right click. Select Sharing.
4. Click on the NFS Sharing tab.
5. If the folder is not already shared, click Share this folder.
6. Click on the Permissions button.
7. Set the global permissions for the All Machines client group (default is read only, no root access.)
8. Click Add to bring up the Add Clients and Groups dialog. From here you can add groups of client machines and set their access permission, or type in the name of an individual computer to set permissions for just that node.
9. When you have set the permissions as you want them, click OK to add the client group.
10. Click OK again to make the change, then finish setting any other options for the NFS share and click OK to finish sharing the folder via NFS.Note: You should install at least one User Name Mapping service on your network to map UNIX and Windows user names to each other. For instructions on how to install and configure User Name Mapping service, see article in our REFERENCES section.

Troubleshooting

If Server for NFS is installed on a non domain controller, you must also install the Server for NFS Authentication module on the local machine. See KB article:

For more information about performing maintenance tasks after migrating from UNIX to Windows, see the Knowledge Base article:
For more information about configuring the User Name Mapping service, see the Knowledge Base article: