How hard it is to configure Kerberos and nfs4?

Peng Yu pengyu.ut at
Wed Jul 28 13:49:40 UTC 2010

On Wed, Jul 28, 2010 at 8:41 AM, Jordon Bedwell <jordon at> wrote:
> On 7/28/10 8:09 AM, Peng Yu wrote:
>> I'm trying to understand this issue a little better. Without kerberos,
>> how to make sure the nfs4 is secure? Is it more difficult to make sure
>> nfs4 secure without kerberos than with kerberos?
> What exactly are you trying to do with NFS4? There were only certain

I want to have one machine as the home directory server. Several other
machines automount this nfs4 home directory as their homes. Please if
any additional information is needed.

> instances that absolutely *required* Kerberos.  You can secure standard
> NFS with the same amount (give or take a bit) of overhead using SSH, you

I assume the "NFS" you refer is version 4, right?

> simply just tunnel it, and use certificates to authenticate on a user
> allowed to access the share only.  If the network is not public facing,
> public (in general) or shared (which in all senses can be public) there
> should be no need to authenticate and encrypt the node.


More information about the ubuntu-users mailing list