How hard it is to configure Kerberos and nfs4?

[Peng Yu]

On Wed, Jul 28, 2010 at 8:41 AM, Jordon Bedwell <jordon at envygeeks.com> wrote:
> On 7/28/10 8:09 AM, Peng Yu wrote:
>>
>> I'm trying to understand this issue a little better. Without kerberos,
>> how to make sure the nfs4 is secure? Is it more difficult to make sure
>> nfs4 secure without kerberos than with kerberos?
>>
>
> What exactly are you trying to do with NFS4? There were only certain

I want to have one machine as the home directory server. Several other
machines automount this nfs4 home directory as their homes. Please if
any additional information is needed.

> instances that absolutely *required* Kerberos.  You can secure standard
> NFS with the same amount (give or take a bit) of overhead using SSH, you

I assume the "NFS" you refer is version 4, right?

> simply just tunnel it, and use certificates to authenticate on a user
> allowed to access the share only.  If the network is not public facing,
> public (in general) or shared (which in all senses can be public) there
> should be no need to authenticate and encrypt the node.

-- 
Regards,
Peng