Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Nov 2009 11:45:17 -0500 (EST)
From:      Rick Macklem <rmacklem@uoguelph.ca>
To:        =?utf-8?B?R2Vycml0IEvDvGhu?= <gerrit@pmp.uni-hannover.de>
Cc:        freebsd-current@freebsd.org
Subject:   Re: nfsv4 FreeBSD server vs. Linux client I/O error
Message-ID:  <Pine.GSO.4.63.0911161140430.7499@muncher.cs.uoguelph.ca>
In-Reply-To: <20091116171527.0b44bae8.gerrit@pmp.uni-hannover.de>
References:  <20091112182414.cebec1df.gerrit@pmp.uni-hannover.de> <Pine.GSO.4.63.0911121436150.15244@muncher.cs.uoguelph.ca> <20091113103626.414acdbc.gerrit@pmp.uni-hannover.de> <Pine.GSO.4.63.0911131056060.20603@muncher.cs.uoguelph.ca> <20091116112631.e8733905.gerrit@pmp.uni-hannover.de> <Pine.GSO.4.63.0911161038100.23864@muncher.cs.uoguelph.ca> <20091116171527.0b44bae8.gerrit@pmp.uni-hannover.de>

next in thread | previous in thread | raw e-mail | index | archive | help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

---559023410-851401618-1258389917=:7499
Content-Type: TEXT/PLAIN; charset=X-UNKNOWN; format=flowed
Content-Transfer-Encoding: QUOTED-PRINTABLE



On Mon, 16 Nov 2009, Gerrit K=C3=BChn wrote:

>
> Not for me, I do not need the feature. I was only thinking about it
> because the better security of nfsv4 is easily gotten around when you
> allow for the old v3 mounts in parallel.
>

You can use the "sec=3D" export option to restrict mount points to only
allowing Kerberos (this works for NFSv3 as well as NFSv4) and is what
will give you better security. (It's not an NFSv4 specific feature, it
just happens to be required by the NFSv4 RFC.)

rick
---559023410-851401618-1258389917=:7499--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.63.0911161140430.7499>