Re: NFS, password transparency, and security
On Sun, Apr 07, 2002 at 09:02:56PM -0500, Rob VanFleet wrote:
You have three issues:
Shared Authentication...
Kerberos or LDAP
File Sharing
Looked at GFS? Could also use NFS I guess. Sigh.
Look at autofs
Security!
NFS and LDAP by default do stuff in plain text...
over an open network this plain sucks...
Set up Freeswan on all the nodes. If you have control of
or access to any DNS you can set them all up to use
opportunistic encryption. Once this is in place, and the
list of nodes (ie keys that are trusted) is made, then
I'd be very happy to have single signon and NFS
automounted home directories... even on disparate nodes
across the internet. But only once they are all "VPN'd".
--
Paul
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: