Hello
I have installed Gluster 3.6.8 on Ubuntu 14.04 LTS (from PPA). I did
create a volume with the following command:
gluster volume create myvol replica 2
server1:/export/glusterfs/myvol/brick1
server2:/export/glusterfs/myvol/brick2
and followed with 'gluster volume start myvol', then 'gluster volume
info' showed this:
Volume Name: myvol
Type: Replicate
Volume ID: eea55188-9f4a-4589-a0b7-d8e2d85f103f
Status: Started
Number of Bricks: 1 x 2 = 2
Transport-type: tcp
Bricks:
Brick1: server1:/export/glusterfs/myvol/brick1
Brick2: server2:/export/glusterfs/myvol/brick2
As this volume was available to be mounted from anywhere with glusterfs,
I did also run:
gluster volume set myvol auth.allow 127.0.0.1,<IP-addresses-of-clients>
With some testing, I did realize, that I can mount the volume with NFS
from anywhere in my local network. According to the documentation [1],
the option nfs.rpc-auth-allow should be set to 'Reject All' as default,
but somehow it is not.
[1]
https://gluster.readthedocs.org/en/latest/Administrator%20Guide/Managing%20Volumes/
As a work around I did the following additional steps:
gluster volume set myvol nfs.rpc-auth-allow 127.0.0.1
This gave a 'Permission denied' message when tried to mount with NFS
from an other system, and then I also did run:
gluster volume set myvol nfs.disable On
which disabled NFS so far and GlusterFS is not listening on TCP port
2049 any more.
Is something broken with the default Ubuntu PPA package? Or did I miss a
configuration option to disable NFS on default for all (new) volumes?
bye
Fabian
_______________________________________________
Gluster-users mailing list
Gluster-users@xxxxxxxxxxx
http://www.gluster.org/mailman/listinfo/gluster-users
