Re: Security negotiation

Tom Haynes
2009-07-13T16:07:45Z

Trond Myklebust wrote:
> On Fri, 2009-07-10 at 17:38 -0500, Tom Haynes wrote:
>
>> If they have the same access lists, then the server is free to order them...
>>
>> share -F nfs -o sec=sys:none:krb5,rw /foo
>> share -F nfs -o sec=sys,ro,sec=krb5p,rw,root=@192.168.2.0,sec=krb5,rw /bar
>>
>> In the first, we don't care how the server presents them. In the second,
>> the list would be: sys krb5p krb5.
>>
>
> Meaning that the client defaults to read-only access?
>
> Trond
>

In this scenario, yes.

The export states that if you can't be bothered to run kerberos, I can't
be bothered to let you write
to my filesystem.