From: Vincent Roqueta <vincent.roqueta@ext.bull.net>
Subject: Re: Authenticated NFS mounts
Date: Tue, 18 Oct 2005 13:13:09 +0200
Message-ID: <200510181313.09401.vincent.roqueta@ext.bull.net>
References: <dj2kkn$4hr$1@benzin.geggus.net>
Mime-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
To: nfs@lists.sourceforge.net
In-Reply-To: <dj2kkn$4hr$1@benzin.geggus.net>
Sender: nfs-admin@lists.sourceforge.net
Errors-To: nfs-admin@lists.sourceforge.net

Le mardi 18 Octobre 2005 13:00, Sven Geggus a =E9crit=A0:
> Hello NFS-list,
>
> Section A5 of the Linux NFS FAQ (Can I use Kerberos authentication with N=
=46S
> on Linux?) is somewhat confusing as it the Answer is not clearly yes or n=
o.
>
> So whats the current Answer to this simple Question:
>
> Is ist possible to use RPCSEC GSSAPI in conjunction with NFSv3 on Linux
> Clients and Servers?
Yes, that is possible.

However,
__________________________________________________________________
> > >Beaware NFSv3 is not really secure, even with kerberos.
> >
> >Have you some documentation on this issue?
>
> I don't know what the right citation is.
>
> Problems I know of; maybe there are others:
>
>        1. nfsv2/v3 mount doesn't traditionally seem to know how to use
>           rpcsec_gss, so in theory someone could spoof the reply to your
>           mount call, returning a filehandle other than the one you asked
>           for.
>        2. The locking protocol used with v2/v3 doesn't use rpcsec_gss.
>
> But depending on your environment these problems may not worry you.
>
> --b.
___________________________________________________________________


> I managed to use it in conjunction with NFSv4, but NFSv4 does not seem to
> be stable enough for production use.=20
Hmmm... Which kernel are you using ?
The nfsv4 mailing list is here :  nfsv4@linux-nfs.org

> I had machine lockups even on a  test-installation I have been using :(
What kind of lockups ?


Vincent


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs