Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any chance to secure NFS so it can authenticate mount requests more than by IP address? Of course I am aware that NFS by design does not allow it but I think of any wrapper for it or may be any other solution to mount home directories on multiple machines in single subnet environment, where I can not be sure someone does not spoof IP address.

share|improve this question

You can use Kerberos.

When using NFS without kerberos the security of all data in the NFS share depends on the integrity of all clients and the security of the network connections. If you use kerberos the security doesn't depend on all client machines because the server gives access to users with a valid kerberos ticket only.

More (general) information

share|improve this answer
Thanks for this answer! Seems to solve the problem in some way. Nevertheless I would be more satisfied with solution based thoroughly on open source. – Mike Dec 24 '12 at 12:47

This is probably the best answer to my question:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.