Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

Is there any chance to secure NFS so it can authenticate mount requests more than by IP address? Of course I am aware that NFS by design does not allow it but I think of any wrapper for it or may be any other solution to mount home directories on multiple machines in single subnet environment, where I can not be sure someone does not spoof IP address.

share|improve this question

2 Answers

up vote 2 down vote

You can use Kerberos.

When using NFS without kerberos the security of all data in the NFS share depends on the integrity of all clients and the security of the network connections. If you use kerberos the security doesn't depend on all client machines because the server gives access to users with a valid kerberos ticket only.

More (general) information

share|improve this answer
Thanks for this answer! Seems to solve the problem in some way. Nevertheless I would be more satisfied with solution based thoroughly on open source. – Mike Dec 24 '12 at 12:47
up vote 0 down vote

This is probably the best answer to my question: http://wiki.debian.org/NFS/Kerberos

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.