IBM NFS/DFS Secure Gateway Network Router User Manual


 
To end the authenticated session before the DCE credentials expire, issue the
dfs_logout command from the NFS client. The command removes the users
entry from the authentication table on the Gateway Server machine. The
command can be issued either by the user whose entry is to be removed from
the authentication table or by a user who is logged into the NFS client as the
local superuser root. The command has no effect on authenticated access that
the user has established with other NFS clients.
The syntax of the dfs_logout command follows:
dfs_logout [-h hostname][dce_principal]
where:
-h hostname
Species the hostname of the Gateway Server machine. By default, the
command uses the hostname of the machine that exports /... to the
NFS client. Use this option to contact a different Gateway Server.
dce_principal
Species the DCE principal name of the user whose entry is to be
removed from the authentication table. By default, the command
deletes the entry for the user who issues the command.
For example, the following ends the authenticated session of the issuer of the
command:
$ dfs_logout
Authenticating to DCE from a Gateway Server Machine
The dfsgw add command authenticates a user to DCE from a Gateway Server
machine. Users can use the dfsgw add command if the dfs_login command is
not installed on the NFS client from which they desire access to DFS. System
administrators can use the command to administer authenticated access to
DFS from a Gateway Server machine. Note that for NFS clients not congured
to enable DCE authentication, the dfsgw add command represents the only
way to authenticate with DCE.
The dfsgw add command provides essentially the same functionality as the
dfs_login command. However, unlike the dfs_login command, the dfsgw add
command does not communicate with the Gateway Server (dfsgwd) process;
it creates the login context and entry in the authentication table. In addition, it
requires the issuer to identify the user for whom authenticated access is
desired and the NFS client from which the user is to access DFS. Also, the
dfs_login command allows the issuer to request a ticket lifetime.
To end a users authenticated session from a specied NFS client, issue the
dfsgw delete command on the Gateway Server machine. The command
Chapter 4. Accessing DFS from an NFS Client 21