vserver export-policy access-cache show-rules

Description​

The vserver export-policy access-cache show-rules command is used in conjunction with the vserver export-policy access-cache show command. The vserver export-policy access-cache show command displays the state and contents of an access cache entry on the specified node for a particular client IP address belonging to an export policy in a Vserver. The command lists the rule indexes of the export policy rules that matched. If you are interested in finding out the security settings for each policy rule that matched then you can use the vserver export-policy access-cache show-rules command. You can use the -instance switch to get a more detailed listing. Do note that the security settings of the rules cached in the access cache entry match the security settings of the rules that can be obtained by running the vserver export-policy rule show command with the corresponding rule index.

If the client IP address is not cached in access cache then the command will display an error message stating that the entry does not exist.

Parameters​

{ [-fields <fieldname>, ...]

If you specify the -fields <fieldname>, ... parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.

| [-instance ]}

If you specify the -instance parameter, the command displays detailed information about all fields.

-node <nodename> - Node

This parameter specifies the node on which you want to examine the export policy rule details in the access cache entry.

-vserver <vserver name> - Vserver

This parameter specifies the name of the Vserver on which you want to see the policy rule details in the access cache entry.

-policy <export policy name> - Policy Name

This parameter specifies the name of the export policy that is in effect on the export path that the client is trying to access.

-address <IP Address> - IP Address

This parameter specifies the IP address of the client whose access cache entry you want to examine in greater detail.

[-ruleindex <integer>] - Entry Policy Rule Index

This optional parameter specifies the index number of the export rule of a specific policy.

[-protocol <Client Access Protocol>, ...] - Access Protocol

This optional parameter specifies the list access protocols of export rules.

[-rorule <authentication method>, ...] - RO Access Rule

This parameter specifies the security type for read-only access to volumes that use the export rule.

[-rwrule <authentication method>, ...] - RW Access Rule

This parameter specifies the security type for read-write access to volumes that use the export rule.

[-superuser <authentication method>, ...] - Superuser Security Types

This parameter specifies a security type for superuser access to files.

[-anon-uid <integer>] - Anonymous User ID

This parameter specifies an anonymous user ID that the user credentials are mapped to.

[-anon-gid <integer>] - Anonymous User Primary GID

This parameter specifies an anonymous User Primary GID.

[-anon-gid-list <integer>, ...] - Anonymous User GID List

This parameter specifies an anonymous User Primary GID list.

[-protocol-flags {allow-suid|allow-dev}, ...] - Protocol Flags

This parameter specifies protocol flags such as allow-suid and allow-dev.

[-ntfs-unix-security-ops {ignore|fail}] - NTFS Unix Security Options

This parameter specifies whether UNIX-type permissions changes on NTFS (Windows) volumes are prohibited (fail) or allowed (ignore).

[-chown-mode {restricted|unrestricted}] - Change Ownership Mode

This parameter specifies a change ownership mode.

[-clientmatch <text>] - Client Match String

This parameter specifies the client or clients to which the export rule applies.

[-anonuser <text>] - Anonymous Username or ID

This parameter specifies a UNIX user ID or user name that the user credentials are mapped to.