Remote Root User on Exported Folders

Previous installers enabled remote root user access through /etc/exports for remote workflows. This changes in 2022 and 2022.1.

Remote workflows (also known as workgroup configurations) require network access to /opt/Autodesk. This folder is exported and made accessible to remote workstations through /etc/exports.

Older Flame Family product installers (pre-2022) edited /etc/exports to enable access to /opt/Autodesk but enabled remote root user access, something that should be avoided.

The following sections explain how to disable remote root user access while preserving remote workflows.

macOS

Before Flame Family 2022, the Flame Family installers for macOS configured the file /etc/exports to enable workgroup configuration (remote workflow), but with remote root user access (-maproot=root). The 2022 version of the installers no longer export /opt/Autodesk, and this can create an issue with remote workflows.

Follow the steps below to disable remote root user access from /opt/Autodesk while preserving the remote workflow.

To disable remote root user access to /opt/Autodesk:

1. As root, open for editing the file /etc/exports
2. Delete from every line: -maproot=root

   Only keep -maproot=root if you absolutely need remote root user access.

3. Remove any -network option that is not followed by a network name.
4. Save the file and exit the editor.
5. Restart nfs with:

   sudo nfsd restart

Before and after example:

• A /etc/exports containing the following line:

  /opt/Autodesk -network -maproot=root

• Becomes:

  /opt/Autodesk

On macOS, the 2022 and 2022.1 versions of the Flame Family products no longer create or edit /etc/exports. If you plan on using remote workflows, create the file /etc/exports and add the following line:

/opt/Autodesk

CentOS

Note: If Flame Family 2022.1 is the first time you are installing a Flame Family product on your workstation, /opt/Autodesk is exported with the correct remote access permissions. You can safely ignore the instructions below.

Both DKU 16 and the Flame Family 2022 installer for CentOS configure the file /etc/exports to enable workgroup configuration (remote workflow), but with remote root user access (no_root_squash). Follow the steps below to disable remote root user access from /opt/Autodesk while preserving the remote workflow.

To disable remote root user access to /opt/Autodesk:

1. As root, open for editing the file /etc/exports
2. Delete from every line: no_root_squash

   Only keep no_root_squash if you absolutely need remote root user access.

3. Save the file and exit the editor.
4. Export the directories to activate the new settings:

   sudo exportfs -va

Before and after example:

• A /etc/exports containing the following line:

  /opt/Autodesk *(rw,sync,no_root_squash)

• Becomes:

  /opt/Autodesk *(rw,sync)