如何从现有导出策略规则中删除写入访问权限
适用场景
- ONTAP 9
- NFS
- 导出策略
描述
此 KB 解释了如何从当前导出策略规则配置中删除写访问权限
操作步骤
- 确认当前导出策略规则配置
cluster1::*> export-policy rule show -clientmatch 192.168.0.100 -ruleindex 1 -instance
Vserver: svm1_cluster1Policy Name: defaultRule Index: 1Access Protocol: nfs3, nfs4, cifs, nfsList of Client Match Hostnames, IP Addresses, Netgroups, or Domains: 192.168.0.100RO Access Rule: anyRW Access Rule: anyUser ID To Which Anonymous Users Are Mapped: 65534Superuser Security Types: anyHonor SetUID Bits in SETATTR: trueAllow Creation of Devices: trueNTFS Unix Security Options: failVserver NTFS Unix Security Options: use_export_policyChange Ownership Mode: restrictedVserver Change Ownership Mode: use_export_policyPolicy ID: 12884901889- 删除写入访问权限
cluster1::*> vserver export-policy rule modify -vserver svm1_cluster1 -clientmatch 192.168.0.100 -ruleindex 1 -rwrule never -policyname default
cluster1::*>
- 确认配置更改是否已生效。
cluster1::*> vserver export-policy rule show -clientmatch 192.168.0.100 -ruleindex 1 -instance
Vserver: svm1_cluster1Policy Name: defaultRule Index: 1Access Protocol: nfs3, nfs4, cifs, nfsList of Client Match Hostnames, IP Addresses, Netgroups, or Domains: 192.168.0.100RO Access Rule: anyRW Access Rule: neverUser ID To Which Anonymous Users Are Mapped: 65534Superuser Security Types: anyHonor SetUID Bits in SETATTR: trueAllow Creation of Devices: trueNTFS Unix Security Options: failVserver NTFS Unix Security Options: use_export_policyChange Ownership Mode: restrictedVserver Change Ownership Mode: use_export_policyPolicy ID: 12884901889合作伙伴备注
PartnerNotes_Text
追加信息
never-对于来自符合客户端匹配条件的客户端的传入请求、不允许对卷进行写入访问、无论该传入请求的有效安全类型是什么(由规则确定)。