Cool Solution - NFS with UCS

From Univention Wiki

Jump to: navigation, search
Produktlogo UCS Version 3.2
Produktlogo UCC Version 1.0

Note: Cool Solutions are articles documenting additional functionality based on Univention products. Not all of the shown steps in the article are covered by Univention Support. For questions about your support coverage contact your contact person at Univention before you want to implement one of the shown steps.

Also regard the legal notes at Terms of Service.

TITLE=Network File System in Version 4 (NFSv4) for Univention Products


This article describes how to configure the Network File System (NFS) in Version 4 for Univention Corporate Clients (UCC) and Univention Corporate Servers (UCS). Since UCS 3.2 NFSv4 is activated by default1.. UCS Versions < 3.2 use NFSv3 for shares so please have a look on NFSv4 for Univention Corporate Server < 3.2.


Shares on UCS

At least for medium environments it is recommended to set up a seperate file server (e.g. DC Slave). On this server shares can created as described in the UCS documentation.

Shares with Kerberos authentication and Data integrity

krb5 / krb5i / krb5p

Configuration in the Univention Management Console

Beside several different Options in the TAB 'NFS' which are described in the UCS documentation it is possible to set following Univention Configuration Registry variables:

  • nfs/autostart - This variable configures the start mode of the NFS service. If set to 'no' or 'disabled', the service cannot be started. If the variable is set to 'manually', the service isn't started during system boot, but can be enabled manually at a later point.
  • nfs/common/gssd - This variable defines if the gssd daemon should be started. Evaluated values are 'yes', 'no' or <undefined> (default=yes).
  • nfs/common/idmapd - This variable defines if the idmap daemon should be started. Evaluated values are 'yes', 'no' or <undefined> (default=yes).
  • nfs/create/homesharepath - If this option is activated, the home directory configured for a user in the attributes 'Home share' and 'Home share path' is automatically created through a Univention Directory Listener module.
  • nfs/nfsd/nfs4 - This option activates the NFSv4 support of the NFS server. In addition the IDMAPD process must be configured usually.
  • nfs/ports - If this variable is set to 'static', fixed ports are used for the NFS services: 32767 for RPC mounts, 32765/32766 for statd and 32769 for the quota service. Otherwise the ports are assigned dynamically.
  • ucc/pxe/nfsroot - Sets the PXE-Rollout-Server in the domain.


Install following packages:

apt-get install nfs-common

Create mount directory.

Temporary mount

To mount a NFSv4 share temporary use following command:

mount -t nfs4 nfs-server.domain:/path-to-share /path-to-local-mnt-dir

Static mount

To add the share permanently it is possible to mount the share statically during system startup. Therefor the /etc/fstab has to be edited with the following line (USE TABS BETWEEN THE VALUES):

nfs-server.domain:/path-to-share /path-to-local-mnt-dir nfs4 auto 0 0

Auto mount

Unlike the static mount option it is possible to automatically mount the share when accessed. Therefor it is necessary to install autofs:

apt-get install autofs

Afterwards add following line to /etc/auto.home

/path-to-local-mnt-dir /etc/

Create /etc/ and insert following:

* nfs-server.domain:/path-to-share

Mount with Kerberos authentication

To mount using Kerberos authentication use following command:

mount -t nfs4 nfs-server.domain:/path-to-share /path-to-local-mnt-dir -o sec=krb5

To static mount the share use:

nfs-server.domain:/path-to-share /path-to-local-mnt-dir nfs4 sec=krb5 0 0



1. Release Notes Univention Corporate Server 3.2: 2.

Personal tools