[OFFTOPIC] Secure network fileserving Linux <-> Linux

Joseph Mathewson
2001-09-05T19:13:53Z

Sorry to ask another annoying question so quickly after my SCSI problems,
but

Does anyone know of/use a secure network filesharing system on a Linux
network? We currently have a room of about 10 machines, mostly Linux
clients (some MacOS X, soon to come Sun and HP-UX boxes) and servers (all
running Linux).

For some time now, we've been using NFS for filesharing /home and have been
extremely concerned about security. All the clients in theory run the same
uids/gids, thanks to LDAP, but that doesn't stop someone plugging in an
unauthorized machine and merrily destroying everyone's home directories.

Apparently some work was done to Kerberize various bits of NFS, and Sun
have a secure(r) implementation in Solaris.

Does anyone know of a free (preferably easy :) way of secure Linux <->
Linux filesharing? Apologies if that seems like a flame, maybe I've missed
the obvious solution. (Preferably a solution that doesn't involve editing
/etc/exports to only allow connections from specified IPs, because if
someone was going to go to the length of destroying our data, they could
fake that. Similarly, MAC addresses.)

Joe.

+-------------------------------------------------+
| Joseph Mathewson <joe@mathewson.co.uk> |
+-------------------------------------------------+