0

We want to export users' home directories using one NFS share but, obviously, we don't want to allow users to be able to access other users homedirs.

So say we have user a, and the NFS shared directory looks like

/nfs
├── a
│   └── files...
├── b
|   └── files...
└── ... 

We want only a to be able to access directory a in /nfs but not be able to access files in b or any other directories in /nfs.

Each user has a Kerberos ticket which we hope to use somehow to restrict access, but I'm not sure if this is possible.

So my question is, Is there a way to restrict access like I have described above using a Kerberos ticket?

From what I've seen I haven't found anything on how to do this; the closest I have is restricting by machine IP (here) but this is obviously not applicable.

Thank you!

  • 1
    You can rely on UNIX permissions on each user directories, unless you want administratively prohibit users to share some part of their home directories with others. – Piotr P. Karwasz Jan 18 at 1:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.