Re: Security negotiation

Tom Haynes
2009-07-14T18:24:30Z

J. Bruce Fields wrote:
> Yeah, that was a linux mountd bug. Fixed by the below. And note the
> rfc language it mentions:
>
> "For this reason, a NFS client SHOULD use the first flavor in the
> list that it supports, on the assumption that the best access is
> provided by the first flavor. NFS servers that support the
> ability to export file systems with multiple security flavors
> SHOULD either present the best accessing flavor first to the
> client, or leave the order under the control of the system
> administrator."
>
> Of course we may still be stuck with buggy servers, so perhaps a careful
> client will still want to handle auth_null at least specially....
>
>

Hey Chuck and Bruce,

Thanks for the discussion on this subject, it really helped us by
understanding what the
Linux client and server was doing.

Tom