NFS alternatives?

[Ansar Mohammed]

NIS has huge security issues.
Kerberos/LDAP should be the choice for authn/authz.

On Thu, Nov 5, 2009 at 2:26 PM, Kyle O'Donnell <kyleodonnell-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org>wrote:

> There havent been any nfs related vulnerabilities in quite some time.
> The security concerns may be related to uid conflicts between servers,
> but if you use nis/ldap and configure your exports appropriately nfs
> is perfectly secure...unless you are worried about unencrypted traffic
> over the wire.
>
> On 11/5/09, Matthew Godycki <mcg2-bJEeYj9oJeDQT0dZR+AlfA at public.gmane.org> wrote:
> > Hi folks,
> >
> > I have a situation at work that is ideally solved by use of NFS (need for
> > a single logical file system underpinning a variety of servers and
> > application
> > server clusters).  Since I'm looking for an infrastructure solution, NFS
> > seems
> > like the perfect fit.
> >
> > However, as I understand it, over the years there have been various
> > concerns about security and vulnerabilities associated with NFS.
> >
> > Are there any alternatives to NFS out there that provide the same type of
> > service, but, without the security concerns?  I'm working with our
> network
> > and system admin folks but want to make sure I do some of my own
> > digging around as well, to be more educated in my chats with them ;)
> >
> > Cheers,
> > -M
> >
> >
> > --
> > The Toronto Linux Users Group.      Meetings: http://gtalug.org/
> > TLUG requests: Linux topics, No HTML, wrap text below 80 columns
> > How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
> >
> --
> The Toronto Linux Users Group.      Meetings: http://gtalug.org/
> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
> How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gtalug.org/pipermail/legacy/attachments/20091105/cd446571/attachment.html>