Lustre 1.6 Operations Manual

11.2.2.4 Specifying Security Flavors
If you have not specified a security flavor, the CLIENT-MDT connection defaults to
plain, and all other connections use null.
Specifying Flavors by Mount Options
When mounting OST or MDT devices, add the mount option (shown below) to
specify the security flavor:
# mount -t lustre -o sec=plain /dev/sda1 /mnt/mdt/
This means all connections to this device will use the plain flavor. You can split this
sec=flavor as:
# mount -t lustre -o sec_mdt={flavor1},sec_cli={flavor1}/dev/sda \
/mnt/mdt/
This means connections from other MDTs to this device will use flavor1, and
connections from all clients to this device will use flavor2.
Specifying Flavors by On-Disk Parameters
You can also specify the security flavors by specifying on-disk parameters on OST
and MDT devices:
# tune2fs -o security.rpc.mdt=flavor1 -o security.rpc.cli=flavor2 \
device
On-disk parameters are overridden by mount options.
11.2.2.5 Mounting Clients
Root on client node mounts Lustre without any special tricks.
11-14 Lustre 1.6 Operations Manual • September 2008