Linux NFS development
 help / color / mirror / Atom feed
From: Quentin Godfroy <godfroy-7pss2ddYZfWsyDt4atOG6g@public.gmane.org>
To: linux-nfs@vger.kernel.org
Subject: AES support for RPCSEC_GSS?
Date: Tue, 12 Feb 2008 02:20:07 +0100	[thread overview]
Message-ID: <20080212012007.GA6993@goelette.ens.fr> (raw)

Hi,

in all the faqs it is said that there is no working support for
anything else than DES which is a bit outdated and not secure
nowadays.

It seemed to me that there was some code in the nfs-utils which
would do some security negociation (somewhere around utils/gssd/krb5_util.c),
but the kernel had nothing to support that.

I suppose this will be the last thing to be done once the security features
are working with the three versions of NFS.

What are the missing features in this field, and would it be difficult to
add support for other encryption schemes?

Regards,
Quentin Godfroy

             reply	other threads:[~2008-02-12  2:09 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-02-12  1:20 Quentin Godfroy [this message]
     [not found] ` <20080212012007.GA6993-Gn1em/8t8udFYcqGaMRPHA@public.gmane.org>
2008-02-12  4:37   ` AES support for RPCSEC_GSS? J. Bruce Fields
2008-02-13 17:01     ` Quentin Godfroy
     [not found]       ` <20080213170155.GA12551-Gn1em/8t8udFYcqGaMRPHA@public.gmane.org>
2008-02-13 17:59         ` J. Bruce Fields

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20080212012007.GA6993@goelette.ens.fr \
    --to=godfroy-7pss2ddyzfwsydt4atog6g@public.gmane.org \
    --cc=linux-nfs@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox