If you used IPSec, yes, you would be establishing a VPN between each workstation and the server. But this will secure all traffic, from the NFS root mount to the XDMCP request, to the login and authentication from the display manager. Once the VPN connection is established, every aspect of network traffic would be at that point encrypted and more secure. It would slow things down a bit, but I'm sure you're used to that with ssh. You could also use the VPN connection instead of tunneling through ssh (or in addition to tunneling through ssh) to help with the problems you are seeing with ssh and security.
Dumas Patrice wrote: >On Tue, Oct 02, 2001 at 09:22:31AM -0400, Jim McQuillan wrote: > >>Pat, >> >>Why not just use IPSec, then everything would be encrypted between the >>workstation and the server. >>Including X and NFS. >> >>Jim. >> > >My question was a bit of academic, in fact. I allready use vnc in ssh, but I >wanted to know whether it would be possible with X and not only vnc. > >Why not use IPSec ? Hmm, the reason is that I know ssh, and not IPSec ;-). I >also suspect that it is harder to manage, but I may be wrong. It also seems to >me that the IPSec doesn't really do the same thing than ssh, and maybe ssh is >better suited for authentication (and IPSec for doing a VPN ?). But I have no >real knowing of all that stuff. I also know that ssh has some flaws, but I >think that's not a problem for the degree of security I want. > >Pat > >_____________________________________________________________________ >Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: > https://lists.sourceforge.net/lists/listinfo/ltsp-discuss >For additional LTSP help, try #ltsp channel on irc.openprojects.net > -- Jason A. Pattie [EMAIL PROTECTED] _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.openprojects.net
