NAME
ncpmount, mount.ncp, mount.ncpfs - mount volume(s) from a specified
NetWare fileserver.
SYNOPSIS
ncpmount [ -h ] [ -S server ] [ -U user name ] [ -P password | -n ] [
-C ] [ -c client name ] [ -u uid ] [ -g gid ] [ -f file mode ] [ -d dir
mode ] [ -V volume ] [ -t time_out ] [ -r retry_count ] [ -b ] [ -i
level ] [ -v ] [ -m ] [ -y iocharset ] [ -p codepage ] [ -N ignored
namespace ] [ -2 | -3 | -4 ] [ -s ] [ -A dns name ] mount-point
mount.ncp remote-server-and-user mount-point [ -n ] [ -v ] [ -o
mount_options ]
DESCRIPTION
This program is used to mount volumes of the specified NetWare
Fileserver under the specified mount point.
ncpfs is a linux filesystem which understands the NCP protocol. This is
the protocol Novell NetWare clients use to talk to NetWare servers.
ncpfs was inspired by lwared, a free NetWare emulator for Linux written
by Ales Dryak. See ftp://klokan.sh.cvut.cz/pub/linux for this very
interesting program.
ncpmount, when invoked with all appropriate arguments, attaches and
logs into specified server and mounts all volumes (or one volume or
subtree) from server under the specified mount point. ncpmount when
invoked without any arguments specifying the fileserver, user id and
password checks the file $HOME/.nwclient to find a file server, a user
name and possibly a password to use for the specified mount point. See
nwclient(5) for more information. Please note that the access
permissions of .nwclient MUST be 600, for security reasons.
OPTIONS
mount-point
mount-point is the directory you want to mount the filesystem over.
Its function is the the same as for a normal mount command.
If the real uid of the caller is not root, ncpmount checks whether
the user is allowed to mount a filesystem on the mount-point. So it
should be safe to make ncpmount setuid root. The filesystem stores
the uid of the user who called ncpmount. So ncpumount can check
whether the caller is allowed to unmount the filesystem.
-S server (mount option server= or part before / in remote-server-and-
user)
server is the name of the server you want to use.
-h
-h is used to print out a short help text.
-C (mount option noupcasepasswd)
By default passwords are converted to uppercase before they are sent
to the server because most servers require this. This option
disables this feature ensuring that passwords are sent without any
case conversion.
-n (mount option nopasswd)
-n must be specified for logins that do not have a password
configured. This option means do not update /etc/mtab if there is
option -o on command line. You must use -o nopasswd in this case.
passwdfile=file (only mount option)
If you want specify password and you do not want store it into world
readable /etc/fstab, you can use this option. file then contains
lines in form SERVER/USER:PASSWORD:other_data (other_data are
currently unused)
pass-fd=fd (only mount option)
If you want to pass password in secure way to ncpmount, you can pass
it through specified fd.
-P password (mount option passwd=)
specifies the password to use for the Netware user id.
If neither -n nor the -P nor the passwdfile= nor the pass-fd=
arguments are specified ncpmount will prompt for a password. This
makes it difficult to use in scripts such as /etc/rc. If you want to
have ncpmount work automatically from a script you must include the
appropriate option and be very careful to ensure that appopriate
file permissions are set for the script that includes your password
to ensure that others can not read it.
-U user name (mount option user= or rest of remote-server-and-user
after /)
Specifies the Netware user id to use when logging in to the
fileserver. If this option is not specified then ncpmount will
attempt to login to the fileserver using the Linux login id of the
user invoking ncpmount.
-m (mount option multiple)
Normally, ncpmount limits number of connections from client to
server to one per unique user name. If you want mount more than one
connection with same username and server, you must specify -m.
-u uid, -g gid (mount option uid= and gid=)
ncpmount does not yet implement a scheme for mapping NetWare
users/groups to Linux users/groups. Linux requires that each file
has an owner and group id. With -u and -g you can tell ncpmount
which id’s it should assign to the files in the mounted directory.
The defaults for these values are the current uid and gid.
-c user name (mount option owner=)
-c names the user who is the owner of the connection, where owner
does not refer to file ownership (that "owner" is set by the -u
argument), but the owner of the mount, ie: who is allowed to call
ncpumount on this mount. The default owner of the connection and the
mount is the user who called ncpmount. This option allows you to
specify that some other user should be set as the owner.
In this this way it is possible to mount a public read-only
directory, but to allow the lp daemon to print on NetWare queues.
This is possible because only users who have write permissions on a
directory may issue ncp requests over a connection. The exception to
this rule is the ’mount owner’, who is also granted ’request
permission’.
-f file mode, -d dir mode (mount option mode= (or filemode=) and
dirmode=)
Like -u and -g, these options are used to determine what permissions
should be assigned files and directories of the mounted volumes. The
values must be specified as octal numbers. The default values are
taken from the current umask, where the file mode is the current
umask, and the dir mode adds execute permissions where the file mode
gives read permissions.
Note that these permissions can differ from the rights the server
gives to us. If you do not have write permissions on the server, you
can very well choose a file mode that tells that you have. This
certainly cannot override the restrictions imposed by the server.
-V volume (mount option volume=)
There are 2 general ways you can mount a NetWare server’s disk
space: Either you can mount all volumes under one directory, or you
can mount only a single volume.
When you choose to mount the complete disk space at once, you have
the advantage that only one Linux mount point and only one NetWare
connection is used for all the volumes of this server. Both of these
are limited resources. (Although raising the number of Linux mount
points is significantly cheaper than raising the number of available
NetWare connections ;-))
When you specify to mount a single volume by using the option -V
volume, you have the big advantage that nfsd is able to re-export
this mounted directory. You must invoke nfsd and mountd with the
option --re-export to make nfsd re-export ncpfs mounted directories.
This uses one Linux mount point and one NetWare connection per
mounted volume. Maybe sometime in the future I will make it possible
to mount all volumes on different mount points, using only one
connection.
-t time_out (mount option timeo= or timeout=)
With -t you can adjust the time ncpfs waits for the server to answer
a request it sent. Use the option to raise the timeout value when
your ncpfs connections seem to be unstable although your servers are
well up. This can happen when you have very busy servers, or servers
that are very far away.
time_out is specified in 1/100s, the current default value is 60.
-r retry_count (mount option retry=)
As -t, -r can be used to tune the ncpfs connection to the server.
With retry_count you can specify how many times ncpfs will attempt
to send a packet to the server before it decides the connection is
dead. The current default value is 5.
Currently ncpfs is not too clever when trying to find out that
connections are dead. If anybody knows how to do that correctly, as
it is done by commercial workstations, please tell me.
-y iocharset (mount option iocharset=)
You can specify character translation rules for converting names
from unicode to your desktop (it works together with -p). iocharset
is charset name, for example iso8859-1.
-p codepage (mount option codepage=)
You can specify character translation rules for converting names
from Netware encoding to unicode (it works together with -y).
codepage is codepage name, for example cp437.
-b (mount option bindery)
If you are connecting to NetWare 4 or NetWare 5 through bindery
emulation instead of NDS, you must specify this option.
-i level (mount option signature=level)
Enables packet signing. level is from 0 to 3: 0 means disable, 1
means sign if server needs it, 2 means sign if server allows it and
3 means sign packets always.
-v
Print ncpfs version number. It has another meaning (verbose) if you
specify -o on command line. If you are interested in version, type
ncpmount -v without another options.
-A dns name (mount option ipserver=dns name)
When you are mounting volumes from NetWare 5 server over UDP, you
must specify dns name of server here and logical server name in -S
(or in server=). This name is used to switch ncpmount into UDP mode
and to specify server to connect. Currently, DNS is only supported
IP name resolution protocol. There is currently no support for SLP.
-N ignored namespace (mount option nonfs and nolong)
ncpfs supports NFS, LONG (OS/2) and DOS namespace on NetWare
volumes. If you do not want to use NFS or LONG namespace (because of
bugs in (server) code or for backward compatibility), you must
specify these ignored namespaces in mount parameters.
-2
If you have unusual ncpfs code in kernel and ncpmount is not able to
autodetect it, use this option. It switches ncpmount to ncpfs
interface version 2. This interface was used in 2.0.x kernels, does
not support NCP/UDP, does not have NDS authentication info storage
and uses only 16bit uid/gid.
-3
If you have unusual ncpfs code in kernel and ncpmount is not able to
autodetect it, use this option. It switches ncpmount to ncpfs
interface version 3. This interface was used in kernels from 2.1.30
to 2.3.40 (laters 2.3.x and 2.4.x still supports this interface to
make transition easier). This interface supports NCP/UDP, does have
NDS authentication info storage (if you uncomment it in kernel
sources) and uses 16bit uid/gid.
-4
If you have unusual ncpfs code in kernel and ncpmount is not able to
autodetect it, use this option. It switches ncpmount to ncpfs
interface version 4. This interface is used in kernels after 2.3.40.
This interface supports NCP/UDP, does have NDS authentication info
storage and uses 32bit uid/gid.
-s (mount option strong)
Normally, files marked read-only cannot be removed from NetWare
volume because of they are marked Delete Inhibit and Rename Inhibit.
If you want to remove these files by simple unlink, you should mount
volume with this option.
mount option nostrong
Refuse to remove read-only files. If you want remove such file, you
must first remove read-only attribute. It is standard behavior of
ncpfs.
mount option symlinks
Use special, normally unused, attributes combinations to express
symlinks, executable attributes and files readable by world.
mount option nosymlinks
Do not allow special meaning of ’shareable’ attribute. This is a
default.
mount option ipx
Use IPX for connection to server. Default if no ipserver option
specified on cmdline.
mount option udp
Use UDP for connection to server. Not available in 2.0.x kernels.
Default if ipserver is used.
mount option tcp
Use TCP for connection to server. Available only with 2.4.0 and
later kernels.
mount option nfsextras
Use the meta-data provided by the NFS namespace to allow files’
modes to be changed, and to allow the creation of symlinks and named
pipes. This adds significant overhead to fetching file information.
mount option nonfsextras
Do not make use of meta-data provided by the NFS namespace. This is
the default.
ENVIRONMENT VARIABLES
USER / LOGNAME
The variables USER or LOGNAME may contain the username of the person
using the client. USER is tried first. If it’s empty, LOGNAME is
tried.
DIAGNOSTICS
Most diagnostics issued by ncpfs are logged by syslogd. Normally
nothing is printed, only error situations are logged there.
EXAMPLES
If you want to mount volume SYS as user DOWNLOAD from server MIRROR
into directory /home/pub/mirror, with files owner mirror.mirror and
file mode -rw-r--r--, you can add
MIRROR/DOWNLOAD /home/pub/mirror ncp
defaults,mode=644,uid=mirror,gid=mirror,owner=root,volume=SYS,nopasswd,multiple
into /etc/fstab. You should always specify multiple in mount options,
otherwise there can be only one connection to server with same name.
NOTES
IPX
You must configure the IPX subsystem before ncpmount will work. It
is especially important that there is a route to the internal
network of your server.
IP
You must specify both -S logical_name and -A dns_name. logical_name
is used for searching .nwclient, other configuration files and is
logged into /etc/mtab, dns_name is used for connecting to server. In
future, logical_name will be read from server.
SEE ALSO
syslogd(8), ncpumount(8), nfsd(8), mountd(8), mount(8)
CREDITS
ncpfs would not have been possible without lwared, written by Ales
Dryak (A.Dryak@sh.cvut.cz).
The encryption code was taken from Dr. Dobbs’s Journal 11/93. There
Pawel Szczerbina described it in an article on NCP.
The ncpfs code was initially hacked from smbfs by Volker Lendecke
(lendecke@math.uni-goettingen.de). smbfs was put together by Paal-Kr.
Engstad (pke@engstad.ingok.hitos.no) and later polished by Volker.
Code is currently maintained by Petr Vandrovec (vandrove@vc.cvut.cz).