From: Scott Gifford (sgiffordsuspectclass.com)
Date: Mon Jul 19 2004 - 15:18:46 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Tobias Edler <tobias.edlerphysik.uni-goettingen.de> writes:

> Hi !
> As i read a lot of competent postings on this list, maybe one of you can
> adwise me on this qustion.
>
> How can i make sure nobody unplugs a worstation, plugs in a laptop, uses
> the workstation's MAC, mounts /home from the nfs server, and does evil
> things to the homedirs ?
> Like, verify some hostkey or something ?

The only standard way I'm aware of is NFSv4 with rpcsec:

    http://www.citi.umich.edu/projects/nfsv4/linux/

I believe this is still somewhat experimental. Other options I can
think of are NFS over SSL and NFS over SSH. A quick googling turns
up:

    http://www.edu.helsinki.fi/atk/ltsp_kiosk/nfs_over_ssl.html
    http://www.math.ualberta.ca/imaging/snfs/

but I haven't tried these.

----ScottG.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]