NFS Question

Greetings

Can someone provide some insight/guidance on NFS usage and security
(hehehe...)

I believe I have some permission issue, or lack of understanding between root
ownership in combination with NFS anonymous users.

Here is a working NFS Export Definition:
	# cat /etc/dfs/dfstab
	share -F nfs -o log,nosuid,[email protected]/24 -d "My NFS Share"
/some/data/export

	# ls -ld /some/data/export
	drwxrwxr-x   3 root     root         512 Mar 18  2009 /some/data/export

After adding the anon=-1, I can no longer mount the NFS from the client.
	# cat /etc/dfs/dfstab
	share -F nfs -o anon=-1,log,nosuid,[email protected]/24 -d "My NFS Share"
/some/data/export

	# cat /etc/vfstab
	nfsserver:/some/data/export -       /mount              nfs     -       yes
nosuid



/var/adm/messages from NFS Server
	Aug 31 13:55:16 nfs_server nfssrv: [ID 734524 kern.notice] NOTICE:
nfs_server: client nfs_client (xxx.xxx.xxx.yyy) sent wrong authentication for
/some/data/export
	Aug 31 13:55:16 nfs_server genunix: [ID 664466 kern.notice] NFS fsstat failed
for server nfs_server: error 7 (RPC: Authentication error)

/var/adm/message from NFS Client
	Aug 31 13:55:16 nfs_client nfs: [ID 664466 kern.notice] NFS fsstat failed for
server nfs_server: error 7 (RPC: Authentication error)


I've been tasked with disabling anonymous NFS access, for whatever value that
really provides.  Upon adding the "anon=-1" section to the NFS export
definition, the client throws messages about RPC: Authentication errors.

Any suggestions or information would be greatly appreciated.


Nick Snyder
Northrop Grumman
Systems Administrator
937-429-6415
[email protected]