[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: shared NFS systems



On Sat, Dec 02, 2000 at 10:54:32AM +0100, Tollef Fog Heen wrote:
> * "Norbert Veber" 
> 
> | On Mon, Nov 27, 2000 at 09:40:40PM -0600, Kirk Strauser wrote:
> | > Oh, throw in NFS-mounted /home and NIS and you have a
> | > generic-terminal system - any user can log in to any terminal in
> | > any part of the office and go to work.  It works for us, at least.
> | 
> | How do you get around users with local root (legitamate or not) nfs mounting
> | and masquarading as other users or root?
> 
> <URL:ftp://ftp.monash.edu.au/pub/keithl/SES/> for instance, which exports
> your home directory only after you have authenticated via kerberos.

Sounds useful.  Do you know of a kerberos howto or some similar document out
there?  I didnt see anything of the like in /usr/share/doc/HOWTO

Although even with this aproach, the files travel the network in plain text,
I was amazed at the lack of options while searching for a secure nfs-like
solution for unix.  I looked into coda, and I still have nightmares about it 
at times.

I think this would me a great open source project for someone :)

Thanks,

Norbert

Attachment: pgpKIrgEVthi2.pgp
Description: PGP signature


Reply to: