Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #2757

Re: Trying to wrap my brain around user authentication for NFSv4

From Andrew Gideon <c182driver9@gideon.org>
Subject Re: Trying to wrap my brain around user authentication for NFSv4
Newsgroups comp.os.linux.networking
References <OfVNu.5$gB6.0@fx06.iad> <leao6u$27o$1@dont-email.me>
Message-ID <JBmPu.8029$aO4.7613@fx02.iad> (permalink)
Organization UsenetServer - www.usenetserver.com
Date 2014-02-26 14:10 +0000

Show all headers | View raw


On Sat, 22 Feb 2014 17:53:34 +0000, William Unruh wrote:

> nfs V4 has servious problems. The whole user/uid translation seems to
> both be buggy and to need a serious rethink.  Mount your sites as
> version 3 (nfs option vers=3)

Thanks, but this is already my fallback.  I could also simply not serve 
NFSv4 from the server if I really decide to abandon NFSv4.

I was hoping, though, to be able to switch to NFS4 at some point for a 
couple of reasons: the improved (perhaps?) ACL semantics and the single 
"port of entry" simplicity for firewalling.

I lock down the various ports needed, rather than letting them float, so 
NFSv3 can be firewalled successfully.  Simpler is better, though, so I 
was hoping that I'd be able to drop this.

What serious problems does NFSv4 have?  Is it just the issue with mixed/
independent databases of users with which I've been struggling, or is 
there more?

Thanks...

	Andrew

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Trying to wrap my brain around user authentication for NFSv4 Andrew Gideon <c182driver9@gideon.org> - 2014-02-22 03:58 +0000
  Re: Trying to wrap my brain around user authentication for NFSv4 William Unruh <unruh@invalid.ca> - 2014-02-22 17:53 +0000
    Re: Trying to wrap my brain around user authentication for NFSv4 Andrew Gideon <c182driver9@gideon.org> - 2014-02-26 14:10 +0000
  Re: Trying to wrap my brain around user authentication for NFSv4 Joe Beanfish <joebeanfish@nospam.duh> - 2014-02-23 20:28 +0000

csiph-web