[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: NFS, password transparency, and security



On Sun, Apr 07, 2002 at 09:02:56PM -0500, Rob VanFleet wrote:

You have three issues:
	Shared Authentication...
		Kerberos or LDAP
	File Sharing
		Looked at GFS? Could also use NFS I guess. Sigh.
		Look at autofs
	Security!
		NFS and LDAP by default do stuff in plain text...
		over an open network this plain sucks...

		Set up Freeswan on all the nodes. If you have control of
		or access to any DNS you can set them all up to use
		opportunistic encryption. Once this is in place, and the
		list of nodes (ie keys that are trusted) is made, then
		I'd be very happy to have single signon and NFS
		automounted home directories... even on disparate nodes
		across the internet. But only once they are all "VPN'd".


--
Paul


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: