Re: Samba vs NFS

"Gregory D. Rosenberg" <[email protected]>
Newsgroups gmane.comp.security.linux
Message-ID <[email protected]>
I can't speak to the technical details quite yet, but Novell / SUSE LINUX 
NSS offers substantial granularity and access controls, as well as 
significant data center scalability advantages. Netware users have long 
loved the security and access control features of NSS. Of course the fat 
lady hasn't sung quite yet. As the first production release is said to ship 
on March 1st. Although our limited experience during the BETAs so far was 
quite positive. What are folks thoughts. Has anyone given NSS a serious look?

At 2/22/2005 04:57 PM, Raul Dias wrote:
 >On Mon, 2005-02-21 at 17:07 -0800, Avery Payne wrote:
 >
 >> NFS is becoming "long in the tooth" and there are replacements that are
 >> being proposed, but none have gained as much widespread traction as
 >> NFS.  Look up AFS (and its cousin, OpenAFS), SFS, and the terms "network
 >> filesystem" or "distributed filesystem" in Google.  AFS has also been
 >> around but uses Kerberos authentication, SFS takes NFS further with
 >> encryption and vastly-stronger user validation.
 >
 >So,
 >
 >What is suggested in a Linux to Linux environment to replace NFS?
 >
 >AFAIK, NFS is only good if you (the admin) have total control over the
 >clients (root access and user accounts always map to the same uid like
 >LDAP, NIS).
 >
 >OTOH, if other people (you don't trust) have root access or uids are not
 >map the sameway everywhere, NFS security is gone.
 >
 >So, what other FS address this problems in Linux? Good authentication,
 >criptography if desired but not mandatory (some times it can slow down
 >the system), and most important stability.
 >
 >A few years ago I search for a replacement of NSF (v3) and found nothing
 >good enough on Linux.  Most solutions were on slow development and had
 >bad stability.
 >
 >NFS v4 seems to address this problems but it is not close to be ready
 >(AFAIK).  RedHat seems to have some closed source fs solution (GFS i
 >think).
 >
 >I even thought already about using a SAMBA to SAMBA Linux solution to
 >address parts of this problems.
 >
 >
 >
 >So, what is there for real today?
 >
 >
 >Raul Dias


-- 
Gregory D. Rosenberg           N9NNO
RICIS, Inc.                                +1 866-RICIS-77 Toll Free Voice (US)
Chief Technology Officer       +1 708-444-2690 Voice (International)
[email protected]                     +1 866-99-RICIS Toll Free Fax (US)
www.ricis.com -                      +1 708-444-2697 Fax (International)

Novell Platinum / ISV partner
SUSE LINUX Premium business, technology, education, and support partner

My PGP Public Key can be found at www.greggrosenberg.com/pgp-key.htm

"The mind works a lot like a parachute, it works best when it is open."

This email and any attachments that are included in it have been scanned 
for malicious or inappropriate content and are believed to be safe.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.