| View previous topic :: View next topic |
| Author |
Message |
MacMasta
Guru
Joined: 18 Apr 2002
Posts: 545
Location: Anchorage, AK
|
 Posted: Mon Oct 07, 2002 10:43 pm Post subject: Securing NFS? |
 |
|
So, I want to share a very large directory over NFS to a few machines read/write, and to a large number read-only - that's not too bad.
However, I am at a CS-heavy school, and we are on static IPs - so spoofing one of the read-write client boxes wouldn't be too hard - is there an effective way of securing NFS to make spoofing a non-issue?
I was thinking of using stunnel, but that's a mighty complicated solution to a pretty easy problem...
Any ideas / other network FSs that might be worth a try?
~Mac~ |
|
| Back to top |
|
 |
rac
Bodhisattva
Joined: 30 May 2002
Posts: 6553
Location: Japanifornia
|
| Posted: Mon Oct 07, 2002 10:58 pm Post subject: Re: Securing NFS? |
|
|
| MacMasta wrote: | | I was thinking of using stunnel, but that's a mighty complicated solution to a pretty easy problem... |
It's not such an easy problem, because of the stateless nature of the NFS protocols. If you're going with NFS, NFS over TCP and stunnel are probably your best bet. Maybe one of the Andrew File System descendents are worth looking into. I used to use Coda, until lack of support for it in Gentoo made me stop. There's also IBM's OpenAFS.
_________________
For every higher wall, there is a taller ladder |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
