How hard it is to configure Kerberos and nfs4?
pengyu.ut at gmail.com
Wed Jul 28 13:49:40 UTC 2010
On Wed, Jul 28, 2010 at 8:41 AM, Jordon Bedwell <jordon at envygeeks.com> wrote:
> On 7/28/10 8:09 AM, Peng Yu wrote:
>> I'm trying to understand this issue a little better. Without kerberos,
>> how to make sure the nfs4 is secure? Is it more difficult to make sure
>> nfs4 secure without kerberos than with kerberos?
> What exactly are you trying to do with NFS4? There were only certain
I want to have one machine as the home directory server. Several other
machines automount this nfs4 home directory as their homes. Please if
any additional information is needed.
> instances that absolutely *required* Kerberos. You can secure standard
> NFS with the same amount (give or take a bit) of overhead using SSH, you
I assume the "NFS" you refer is version 4, right?
> simply just tunnel it, and use certificates to authenticate on a user
> allowed to access the share only. If the network is not public facing,
> public (in general) or shared (which in all senses can be public) there
> should be no need to authenticate and encrypt the node.
More information about the ubuntu-users