Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Most of the reading I have done suggests that RPCSEC_GSS can be set up using Kerberos, but we don't already have a Kerberos server set up. I had read there were other auth methods like LIPKEY that were supposed to be alternative (pluggable?) auth schemes, but I can't seem to find much information on them.

Is RPCSEC_GSS + Kerberos the way to go if I want to move away from AUTH_SYS (aka AUTH_UNIX)? Or is there something that is a little more secure than AUTH_SYS but not as complex as setting up a Kerberos installation?

Thanks, Carl

share|improve this question
up vote 1 down vote accepted

The kerberos5 is the only RPCSEC_GSS implementatin supported by all OSes. LIPKEY is depricated. There is a x509 implementation as well, pku2u,but it still based on kerberos infrastructure. To make it short, kerberos is the only one which can be used. You can use windows AD as KDC.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.