[lug] Re: securing files

Bear Giles bgiles at coyotesong.com
Tue Apr 23 15:13:35 MDT 2002


> On Mon, Apr 22, 2002 at 07:03:55PM -0600, quoth James Stroud:
> > I don't
> > think you can even wrap NFS in SSH.

*sigh*

Ever hear of Secure NFS?  It uses RPC-SUN (just like the secure X
implementations), and while it doesn't use SSH(tm) it does use
public keys and random session ciphers.

There's also RPC-GSSAPI, which ties Kerberos authentication/encryption
into the RPC layer.

But neither is really supported on Linux, partially due to the 
odd fetish for SSH/SSL, so there's the third option which is running
NFS over (Open)SSH tunnels.  There was a detailed article in SysAdmin
a few months ago on how to do this.

Bear



More information about the LUG mailing list