ONCplus B.11.31.15 Release Notes (5992-5685, September 2012)

the server. When another client requests access to the same file, the server revokes the
delegation from the first client and grants it to the second client.
NOTE: Delegations are disabled by default. If delegations are enabled, they are only
supported by applications that access the delegated files remotely via NFS clients. Allowing
local access and enabling delegation on a file can corrupt the file.
◦ ACLs
An access control list (ACL) offers stronger file security by enabling the owner of the file
to define file permissions for the file owner, the group, and other specific users and groups.
◦ String Identifiers
In NFSv4, exchange of user ID (UID) and group ID (GID) information between the client
and server is in the form of strings. The nfsmapid daemon maps UID and GID values
from integer to string and string to integer.
◦ Locks
Locking support is integrated with the NFSv4 protocol. NFSv4 introduces leases for lock
management. When a server grants a lock to control the state of a file for a specific
period of time, it is known as a lease.
◦ Single Protocol
The MOUNT, Network Lock Manager (NLM), and the Network Status Monitor (NSM)
protocols are merged into the NFS protocol. Merging these protocols into a single protocol
enables easy configuration of firewalls. For more information, see NFS Services
Administrator's Guide.
NOTE: The default NFS protocol version on HP-UX 11i v3 is 3. For information on how to
configure NFSv4 as the default version, see NFS Services Administrator's Guide
(B1031–90067).
• Support for WebNFS
WebNFS is an extension of the NFS protocol. It enables easy access to files across the Internet.
Filesystems on the Internet can appear to a user as a local filesystem. WebNFS works through
firewalls and enables applications that run on heterogeneous operating systems to access
shared files.
• Secure NFS
With Secure NFS security can be implemented at the Remote Procedure Call (RPC) level. This
standard authentication system is known as Secure RPC. When NFS uses the facilities provided
by Secure RPC, it is known as Secure NFS.
RPC authentication enables you to use a variety of authentication systems, such as DH, UNIX,
and KERB, and is not dependent on the version of NFS used.
• Client Failover
When an NFS server fails, the client accessing the shared files on that server can no longer
access the shared files. If client failover is enabled, the client is automatically switched to an
alternate server, which is a replica of the server that failed. The client continues to access
shared files, without being aware of the switch.
Features Introduced in ONCplus B.11.31_LR 29