SEO

#1 (**permalink**) 01-04-2008, 09:40 PM

I need to secure our NFS services. We have a common area used as a
software repository and for shared scripts that we mount in read-only
mode at boot time, plus a read-write mount point that we mount when
necessary for script output.

I see an option in smit to "Specify whether you want to require
clients to use a more secure protocol when accessing the directory."
In the client setup, it appears that this specifies the use of DES.

How good (i.e. how secure) is this? Is it bulletproof enough for
production work? Is it version dependent? We have a mix of 4.3, 5.1,
and 5.2 servers.

Are there other options (open source, freeware, or commercial) that
are better?

Any help would be appreciated.

Thanks,
Steve

#2 (**permalink**) 01-04-2008, 09:40 PM

In news:9f303a71.0402171318.1b65ec5f@posting.google.c om,
<sbassle@alleghenyenergy.com> typed:
> Are there other options (open source, freeware, or commercial) that
> are better?

I recommend OpenAFS. (http://www.openafs.org)

Clients are authenticated and traffic is encrypted. Non-trivial to
setup though.

<<CDC
Christopher D. Clausen
ACM@UIUC SysAdmin

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

SEO

Secure NFS