Host based authentication

Kevin Coffman kwc at citi.umich.edu
Wed Apr 18 09:56:41 EDT 2007


On 4/18/07, Ian Grant <Ian.Grant at cl.cam.ac.uk> wrote:
> I just want to confirm that I understand correctly: there is no
> host-based authentication possible using the NFSV4 machine credentials.
> That would contradict the security model of user-based authentication.

Since you mentioned machine credentials, I'm assuming we are talking
about Kerberos mounts.

If you have name/ID mapping like our ldap scheme, then the machine
credential can be mapped to a given user.  Is that what you are
getting at?  If not, can you explain?

K.C.


More information about the NFSv4 mailing list