How hard it is to configure Kerberos and nfs4?
jordon at envygeeks.com
Wed Jul 28 13:41:29 UTC 2010
On 7/28/10 8:09 AM, Peng Yu wrote:
> I'm trying to understand this issue a little better. Without kerberos,
> how to make sure the nfs4 is secure? Is it more difficult to make sure
> nfs4 secure without kerberos than with kerberos?
What exactly are you trying to do with NFS4? There were only certain
instances that absolutely *required* Kerberos. You can secure standard
NFS with the same amount (give or take a bit) of overhead using SSH, you
simply just tunnel it, and use certificates to authenticate on a user
allowed to access the share only. If the network is not public facing,
public (in general) or shared (which in all senses can be public) there
should be no need to authenticate and encrypt the node.
More information about the ubuntu-users