Re: secure NFS problem

Casper Dik <[email protected]> Thu, 01 Jul 2004 17:17:47 +0200
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
>I've been trying to use sec=dh in an experiment to evaluate the secure NFS 
>feature of Solaris 9. 

If its all the same, I'd look into Kerberos V and using Kerberos based
secure RPC.

>I followed the instructions in the docs on docs.sun.com (created a key for 
>myself and my server and ran keylogin -r as root, added sec=dh to the 
>/etc/dfs/dfstab file, and ran shareall). 

>When I try to mount my home directory on a client it gets an error. 
>
> rpcsec: [ID 270986 kern.notice] NOTICE: authdes_create: unable to get client's netname: RPC: Fail
ed (unspecified error) (error 16)

Did you set a domainname?  You need to have a RPC domainname set.



If you're not using NIS or NIS+ you will also need to create a /etc/netid file,
I believe.  (It's all a t akward without a nameservice)

Casper