How hard it is to configure Kerberos and nfs4?

[Jordon Bedwell]

On 7/28/10 8:09 AM, Peng Yu wrote:
>
> I'm trying to understand this issue a little better. Without kerberos,
> how to make sure the nfs4 is secure? Is it more difficult to make sure
> nfs4 secure without kerberos than with kerberos?
>

What exactly are you trying to do with NFS4? There were only certain 
instances that absolutely *required* Kerberos.  You can secure standard 
NFS with the same amount (give or take a bit) of overhead using SSH, you 
simply just tunnel it, and use certificates to authenticate on a user 
allowed to access the share only.  If the network is not public facing, 
public (in general) or shared (which in all senses can be public) there 
should be no need to authenticate and encrypt the node.