Security on NFS mounts.

I've set up some NFS mounts using the following

Source system:
md '/tgtsystem/tgtdirectory
MOUNT TYPE(*NFS)
MFS('tgtsystem:/tgtdirectory')
MNTOVRDIR('/tgtsystem/tgtdirectory')
OPTIONS('rw,suid,retry=5,rsize=32768,wsize=32768,timeo=20,
retrans=5,acregmin=30,acregmax=60,acdirmin=30,
acdirmax=60,soft,async,sec=sys,vers=3:2,nocache')

Target system:
EXPORTFS OPTIONS('-I -O') DIR('/tgtdirectory')

This worked well on several 'target directories'. However I'm running
into a security issue with one. Let's call it PAYROLL.
After doing the above I ran the following on the source system
WRKLNK '/tgtsystem/tgtdirectory/*'
and I received
CPFA09C - Not authorized to object. Object is /tgtsystem/tgtdirectory

So I ran the following on the target system:
CPYAUDJRNE ENTTYP(AF) FROMTIME(080316 1415)
RUNQRY QRYFILE(QTEMP/QAUDITAF)
and I am seeing
Job Job User
name user profile
QNFSNFSD QUSER QNFSANON

So apparently it's using anonymous NFS (QNFSANON). And this directory is
rather sensitive. How do I tell it not to use that but to use the user
profile from the remote system (the user doing the WRKLNK for example)? Is
there some option on EXPORTFS or on the MOUNT itself that I am missing?


Target


Rob Berendt