On Fri, 23 Jun 2000, Benjamin Scott <[EMAIL PROTECTED]> wrote:
>
>   I want to ask the list's opinion on this.  This has been mentioned in
> passing before, but I think a larger discussion might yield more ideas.  The
> question is, what alternatives to NFS are there for simple in-office networked
> file access?
>
>   There's NFS, which has a number of security issues inherent in its design.
> It requires (AFAIK) host-trust relationships, which are insecure in most
> office desktop environments.

Here's the RFC 2623 for connecting Kerberos with NFS and RPC. I'd be interested
in people's opinion of this, what it may still be missing, etc.

        http://sunsite.auc.dk/RFC/rfc/rfc2623.html


Abstract

   This memorandum clarifies various security issues involving the NFS
   protocol (Version 2 and Version 3 only) and then describes how the
   Version 2 and Version 3 of the NFS protocol use the RPCSEC_GSS
   security flavor protocol and Kerberos V5.  This memorandum is
   provided so that people can write compatible implementations.


Karl Runge

**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************

Reply via email to