GPFS: Administration and Programming Reference - IRA Home

mmauth Command
Name
mmauth – Manages secure access to GPFS file systems.
Synopsis
mmauth genkey {new | commit}
Or,
mmauth add RemoteClusterName -k KeyFile -l CipherList
Or,
mmauth update RemoteClusterName -C NewClusterName -k KeyFile [-l CipherList]
Or,
mmauth delete {RemoteClusterName | all }
Or,
mmauth grant {RemoteClusterName | all } -f { Device | all } [-a {rw | ro} ] [-r {uid:gid | no}]
Or,
mmauth deny {RemoteClusterName | all } -f { Device | all }
Or,
mmauth show [RemoteClusterName | all]
Description
The mmauth command prepares a cluster to grant secure access to file systems owned locally. The
mmauth command also prepares a cluster to receive secure access to file systems owned by another
cluster. Use the mmauth command to generate a public/private key pair for the local cluster. A
public/private key pair must be generated on both the cluster owning the file system and the cluster
desiring access to the file system. The administrators of the clusters are responsible for exchanging the
public portion of the public/private key pair. Use the mmauth command to add or delete permission for a
cluster to mount file systems owned by the local cluster.
When a cluster generates a new public/private key pair, administrators of clusters participating in remote
file system mounts are responsible for exchanging their respective public key file /var/mmfs/ssl/
id_rsa.pub generated by this command.
The administrator of a cluster desiring to mount a file system from another cluster must provide the
received key file as input to the mmremotecluster command. The administrator of a cluster allowing
another cluster to mount a file system must provide the received key file to the mmauth command.
The keyword appearing after mmauth determines which action is performed:
add Adds a cluster and its associated public key to the list of clusters authorized to connect to this
cluster for the purpose of mounting file systems owned by this cluster.
Chapter 8. GPFS commands 73