How hard it is to configure Kerberos and nfs4?

Jordon Bedwell jordon at
Wed Jul 28 13:41:29 UTC 2010

On 7/28/10 8:09 AM, Peng Yu wrote:
> I'm trying to understand this issue a little better. Without kerberos,
> how to make sure the nfs4 is secure? Is it more difficult to make sure
> nfs4 secure without kerberos than with kerberos?

What exactly are you trying to do with NFS4? There were only certain 
instances that absolutely *required* Kerberos.  You can secure standard 
NFS with the same amount (give or take a bit) of overhead using SSH, you 
simply just tunnel it, and use certificates to authenticate on a user 
allowed to access the share only.  If the network is not public facing, 
public (in general) or shared (which in all senses can be public) there 
should be no need to authenticate and encrypt the node.

More information about the ubuntu-users mailing list