I've been using NFS on my LAN for a while, but that's a totally unacceptable solution for anything but completely trusted networks. Also, SunRPC doesn't exactly have the greatest track record in terms of security. Are there any alternatives to NFS that behave in a similar fashon (just mount them and they're there as though they were local filesystems) that are a bit more secure (possibly offering some form of authentication in addition to just trusting the host, possibly enforcing some form of user rights so a person can't own a single system and pretend to be any user they want, etc)?

I'm looking to implement part of a Linux based lab where I can either dynamically mount each user's home directory when they log in (this is against a Novell 5 server) or I could possibly mount the whole homes tree, but that wouldn't work very well (see earlier comment about a local compromise leading to full rights on the network).

I'm also looking for ways to authenticate against a central directory (Novell NDS in this case, but I might also want to do some of this at home where I don't run Novell).

Warren, I'm pretty sure you have some experience with this; care to share? :)

--MonMotha

Reply via email to