Re: Access control for a NFS server

Tobias Edler <[email protected]> writes:

> Hi !
> As i read a lot of competent postings on this list, maybe one of you can
> adwise me on this qustion.
>
> How can i make sure nobody unplugs a worstation, plugs in a laptop, uses
> the workstation's MAC, mounts /home from the nfs server, and does evil
> things to the homedirs ?
> Like, verify some hostkey or something ?

The only standard way I'm aware of is NFSv4 with rpcsec:

    http://www.citi.umich.edu/projects/nfsv4/linux/

I believe this is still somewhat experimental.  Other options I can
think of are NFS over SSL and NFS over SSH.  A quick googling turns
up:

    http://www.edu.helsinki.fi/atk/ltsp_kiosk/nfs_over_ssl.html
    http://www.math.ualberta.ca/imaging/snfs/

but I haven't tried these.

----ScottG.