Configuring A Gateway Server Without Enabling Remote Authentication - HP j6750 Supplementary Manual

The DFS/NFS Secure Gateway
Configuring Gateway Server Machines
Before configuring a Gateway Server machine, you must do the following:
• Configure a DCE cell that includes DFS.
• Configure each machine that is to become a Gateway Server as a DFS client and
an NFS server.
• Ensure proper synchronization among the system clocks on machines that are to
become Gateway Servers, machines configured as NFS clients that are to contact
the Gateway Servers, and machines in the DCE cell to be contacted. You must
keep the system clocks on these machines synchronized at all times.
Once you have met these prerequisites, you can configure your Gateway
Server machines.
Configuring a Gateway Server Without Enabling Remote
Authentication
Perform the steps in this section to enable DCE authentication from a
Gateway Server machine without enabling it from NFS clients that contact
the Gateway Server. Users can authenticate only by issuing the dfsgw add
command on the Gateway Server machine (or by having a system
administrator issue the command for them, if administrators control
authentication to the DCE cell).
To allow users of NFS clients to authenticate to DCE from the Gateway
Server machine but not from NFS clients that contact the Gateway Server,
perform the following steps on the machine to be configured as a Gateway
Server:
1 Log in as the local root user on the machine.
2 Install the binary file for the dfsgw command suite in the directory
dcelocal/bin/ on the machine. The dfsgw command suite provides a local
interface to the authentication table maintained on the Gateway Server
machine. Commands in the dfsgw suite can be used to add, delete, and view
mappings in the authentication table. (See the sections from "Authenticating
to DCE from a Gateway Server Machine" through "Displaying Information
About All Users Who Are Authenticated to DCE" for information about
using these commands.)
144