Bug#702448: nfs-common: UID's do not get properly mapped

2013-03-07 Thread J. Bruce Fields
"I've created users test1 and test2 in /etc/passwd, but with swapped UID's" There's a common (and understable) mistake here: many people think that NFSv4 never requires uid's and gid's to agree between hosts. This is not true. NFSv4, when used with traditional auth_sys authentica

Bug#702448: nfs-common: UID's do not get properly mapped

2013-03-06 Thread jtg
Package: nfs-common Version: 1:1.2.6-3 Severity: grave Tags: security Justification: user security hole Dear Maintainers, I've recetly set up an NFSv4 server and I found that ID mapping does always work as expected, allowing a user to read files they should not have access to (and preventing th