Administering FedFS

The FedFS protocols can be used to construct and maintain a federated file system. This file system can include many different file servers, allowing for a multi-vendor global namespace.

How to Create an Namespace Database (NSDB)

A NSDB is used to provide information about the filesets from different types of servers that are combined into a single FedFS namespace. This procedure is done on the LDAP server.

Before You Begin

This procedure requires that you assume the root role and that you have an LDAP server installed.

1. Configure the FedFS LDAP schema.

   Update the LDAP configuration file with the following entries:

   include         /usr/lib/fs/nfs/fedfs-11.schema
   suffix  dc=example,dc=org
   rootdn  cn=Manager,dc=example,dc=org
   rootpw  <password>

2. Create a distinguished name for the FedFS data.

   See the nsdb-update-nci(1M) man page.

   # nsdb-update-nci -l localhost -r 389 -D cn=Manager -w\
         example.org dc=example,dc=org adding new entry "dc=example,dc=org"
   NCE entry created

How to Use a Secured Connection to the NSDB

Before You Begin

This procedure requires that you assume the root role and that you have an LDAP server installed.

1. On the LDAP server: create a certificate.

   # mkdir /etc/openldap/certs
   # mkdir /etc/openldap/certs/keys
   # cd /etc/openldap/certs
   # openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
     -keyout keys/ldapskey.pem -out ldapscert.pem
   # chown -R openldap:openldap /etc/openldap/certs/*
   # chmod 0400 keys/ldapskey.pem

2. On the LDAP server: add declarations to the LDAP configuration file.

   TLSCertificateFile /etc/openldap/certs/ldapscert.pem
   TLSCertificateKeyFile /etc/openldap/certs/keys/ldapskey.pem

3. Copy the certificate to the NFS server and clients.

   # scp ldap-server:/etc/openldap/certs/keys/ldapskey.pem /etc/openldap/certs/keys/ldapskey.pem
   # chmod 0400 /etc/openldap/certs/keys/ldapskey.pem

4. On the NFS server and clients: update the connection entry.

   # nsdbparams update -f ldapscert.pem -t FEDFS_SEC_TLS localhost

How to Create a FedFS Referral

Before You Begin

This procedure requires that you assume the root role and that you have an NFS server installed.

1. Create a connection entry for a NSDB.

   This command creates a connection entry between the NSDB defined on the LDAP server and an NFS server.

   # nsdbparams update -D cn=Manager,dc=example,dc=org -w example.org nsdb.example.org

2. Create a FedFS referral.

   The -t option selects the service type of the referral.

   # nfsref -t nfs-fedfs add /share/docs server2:/usr/local/docs server3:/tank/docs
   Created reparse point /share/doc