See "Administering NIS+ Groups" in Solaris Naming Administration Guide for ways to restrict home directory access to particular groups.
In the root role at label ADMIN_LOW
, under Trusted Solaris Management Console, click this-host: Scope=Files, Policy=TSOL.
If toolbox icons display as red stop signs, the toolboxes will not load. To load them, see Step 2 in "Initialize the SMC Server".
Click Storage, provide a password if prompted, then double-click Mounts and Shares, then double-click Shares.
Choose Add Shared Directory from the Action menu.
Follow the online help to share the /export/home directory.
The tool shares the directory and starts the NFS daemons,
Verify that the directories are shared.
$ showmount -e export list for homedir-server: /export/home |
Repeat the above procedure to share the mail service directory.
For example, when the directories are shared, the showmount command would show something like the following:
$ showmount -e export list for mail-server: /export/post |
If the users' home directories and email directories are on the same server, the command would show the following:
$ showmount -e export list for server: /export/home /export/post |
If you have not finished configuring the name service master, return to "Creating Roles and Users". Otherwise, continue below.