We want to export users' home directories using one NFS share but, obviously, we don't want to allow users to be able to access other users homedirs.
So say we have user
a, and the NFS shared directory looks like
/nfs ├── a │ └── files... ├── b | └── files... └── ...
We want only
a to be able to access directory
/nfs but not be able to access files in
b or any other directories in
Each user has a Kerberos ticket which we hope to use somehow to restrict access, but I'm not sure if this is possible.
So my question is, Is there a way to restrict access like I have described above using a Kerberos ticket?
From what I've seen I haven't found anything on how to do this; the closest I have is restricting by machine IP (here) but this is obviously not applicable.