From owner-freebsd-security Tue Jan 30 11:12:39 2001 Delivered-To: freebsd-security@freebsd.org Received: from mailman.sprintlabs.com (mx.sprintlabs.com [208.30.174.2]) by hub.freebsd.org (Postfix) with ESMTP id 5027B37B6AA for ; Tue, 30 Jan 2001 11:12:20 -0800 (PST) Received: by mailman.sprintlabs.com with Internet Mail Service (5.5.2652.78) id ; Tue, 30 Jan 2001 11:12:18 -0800 Received: from sprintlabs.com (ip199-2-53-135.sprintlabs.com [199.2.53.135]) by mailman.sprintlabs.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2652.78) id DZL7240Z; Tue, 30 Jan 2001 11:12:09 -0800 From: Steven Davidson Reply-To: Steven Davidson To: Sam Wun Cc: freebsd-security@freebsd.org Message-ID: <3A7713B7.EFCA95EB@sprintlabs.com> Date: Tue, 30 Jan 2001 11:19:19 -0800 X-Mailer: Mozilla 4.76 [en] (X11; U; FreeBSD 4.1.1-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 Subject: Re: NFS security References: <20010129045116.A5564@crow.dom2ip.de> <3A7502CF.D5172D9D@esec.com.au> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Sam Wun wrote: > Hi, > > Does anyone knows how to setup NFS trust like the one in Solaris 8 in FreeBSD? > > Thanks Sam. > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message If, by NFS trust, you mean secureRPC than you are mostly out of luck. Although FreeBSD supports secureRPC, it doesn't apply to NFS. You can map all remote users to "nobody" or even "somebody" but real NFS authentication is non-existent. Perhaps kerberos will provide a solution. Also, you can wait for NFSv4. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message