27.12.2012 Views

The Virtualization Cookbook for SLES 10 SP2 - z/VM - IBM

The Virtualization Cookbook for SLES 10 SP2 - z/VM - IBM

The Virtualization Cookbook for SLES 10 SP2 - z/VM - IBM

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Using embedded SSH<br />

It is also possible to achieve X11 <strong>for</strong>warding with an embedded SSH client as shown below.<br />

Again, no xhost command is needed.<br />

Figure 13-5 X11 <strong>for</strong>warding with embedded SSH client<br />

<strong>The</strong>re are many ways how to achieve the same results. It is up to you to choose a solution<br />

which suits the purpose best.<br />

13.<strong>10</strong> Centralizing home directories <strong>for</strong> LDAP users<br />

In previous versions of this book there was a section on how to create a travelling /home/<br />

directory using LDAP, NFS and automount. In the interest of time, this section has been<br />

removed. See section 13.3 in the <strong>IBM</strong> Redbook z/<strong>VM</strong> and Linux on <strong>IBM</strong> System z <strong>The</strong><br />

<strong>Virtualization</strong> <strong>Cookbook</strong> <strong>for</strong> Red Hat Linux Enterprise Server 5.2, SG24-7492, on the Web at:<br />

http://www.redbooks.ibm.com/abstracts/sg247492.html<br />

However, the following section has been added to this book. In December of 2009, the topic<br />

of how to set up a common home directory came up on the linux-390 list server. <strong>The</strong> following<br />

post by Patrick Spinler is copied, with permission, as it may be helpful to you:<br />

13.<strong>10</strong>.1 Recommendations <strong>for</strong> centralizing home directories<br />

“NFSv3 is not known <strong>for</strong> it's security. Consider the use of the NFS option root_squash, along<br />

with limiting the list of hosts who can connect to your home share. Only export home<br />

directories to hosts which you control, remember that anyone who has root on their box (e.g.<br />

a developer workstation) can impersonate any user to NFS. Here's the relevant /etc/exports<br />

line we use:<br />

220 <strong>The</strong> <strong>Virtualization</strong> <strong>Cookbook</strong> <strong>for</strong> RHEL 6

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!