Re: Encrypted network mounts

On Jan 18, 2012, at 8:57 AM, Stefano Mori wrote:

> Hi,
> 
> What are the possibilities on Lion Server for exporting shares that are encrypted over the wire/LAN? The clients would be managed Lion computers.
> 
> Alternatively is there preferred server OS that would work well to provide this to Mac clients?


Use a encrypted wrapper. For instance tunnel it in an ssh or SSL session. 

Example:

I want to connect to a AFP file share on host.example.com. 

ssh -f user-NUfqCKFlCCs+6oi84+IkFQC/[email protected] -L 20548:host.example.com:548 -N

Now on the client connect to afp://user:password@localhost:20548/RemoteShareName


Alternatively:

Or use a VPN connection to the server. OS X Server offers VPN service, if you enable them and connect to the file share you're encrypted no matter what security exists in the file sharing protocol you're discussing. 

-d

------------------------------------------------------------------------
Dan Shoop
[email protected]
GoogleVoice: 1-646-402-5293
aim: iWiring
twitter: @colonelmode