On Feb 13, 2008, at 9:44 AM, Kyle McDonald wrote: > Spencer Shepler wrote: >> >> On Feb 8, 2008, at 1:46 PM, Kyle McDonald wrote: >> >>> Is there a good book to catch up on the changes to NFS in v3 and v4 >>> (mostly v4)? I'm looking to catchup on the admin security stuff >>> mainly, >>> not lowlevel protocol details. >>> >>> The last time I was heavily into admining this stuff, I got vary >>> familiar with (through NIS+) SecureRPC keys, keylogin, etc. for >>> SecureNFS. And while I've picked up on some of the performance >>> related >>> changes with v3, I have totally missed learning aobut the new >>> security >>> features Liek how Kerberos fits in?). And I've got no clue what >>> changes >>> NFS v4 and v4.1 include. >>> >>> I read Hal Stern's (I think he was co-author, but the other name >>> escapes >>> me) O'Reilly NFS book back then and found it useful. O'Reilly >>> replied to >>> my questions that there was no update planned to cover NFS v4. >>> >>> Can anyone suggest anything similiar and more up to date? >> >> There is nothing that I am aware of at this point. Neither the >> O'Reilly book you mention or Brent Callaghan's book have been >> updated to contain NFSv4 material. >> >> I am curious if you are interested in the protocol details or >> information more related to management and integration into existing >> environments or the issues related to the deployment of NFS/Kerberos? >> > The latter really. The administration changes, new features, and > things to be aware of when setting things up. And yes how to get > NFS and Kerberos (or whatever is the suggested replacement for > SecureRPC) working.
The administrative model for most implementations have remained the same from NFSv3 to NFSv4. There are some additions here and there (Linux Server has an additional export option to share the "root" of the NFSv4 tree) but they are not too onerous when they appear. As for NFS/Kerberos configuration and use, that is more platform dependent. While the various implementations interoperate the administrative/config models vary slightly. Most are built from the MIT code base but have their own flair. Not a huge problem but may take some extra effort to get things going. In the Sun documentation set, there is very good coverage of Kerberos configuration and config with NFS. In more recent Solaris releases, the amount of extra configuration steps have been reduced or included in the kclient command. For Linux, I would go to the UMich CITI NFSv4 site for pointers on configuration and use. Spencer
