Skip to content

Commit

Permalink
Update configuring-troubleshooting-host-access-rules-nfs-exports.md
Browse files Browse the repository at this point in the history
  • Loading branch information
Michael G. Khmelnitsky, Ph.D authored Jan 10, 2024
1 parent 32c437c commit c8965d0
Showing 1 changed file with 1 addition and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -24,13 +24,11 @@ The following examples show the elements that a host access rule can include.

* **Allowed Kerberos Security Flavors**

To restrict access to NFSv4.1 clients that use only specific Kerberos security flavors, add the following special strings to the list of host access rules. For example:
To restrict access to NFSv4.1 clients that use only specific [Kerberos security flavors](../kerberos/kerberos-with-qumulo-core.html#choosing-a-kerberos-security-flavor, add the following special strings to the list of host access rules. For example:

* `KRB5P@`: Allow only encrypted access for the specified export.

* `KRB5@`, `KRB5I@`, and `KRB5P@`: Allow any Kerberos-authenticated access, but not `AUTH_SYS` access.

For more information, see [Choosing a Kerberos Security Flavor](../kerberos/kerberos-with-qumulo-core.html#choosing-a-kerberos-security-flavor).

{% include important.html content="If you don't specify a host access rule, Qumulo Core allows access to all IP addresses." %}

Expand Down

0 comments on commit c8965d0

Please sign in to comment.