OpenBSD Journal

y Encrypted NFS with OpenSSH and Linux

Contributed by Dengue on from the I-don't-even-have-my-copy-yet dept.

SysAdmin Magazine is running an article from their March issue: Encrypted NFS with OpenSSH and Linux . It's worth a read.

(Comments are closed)

Comments

  1. By jose nazario () jose@crimelabs.net on mailto:jose@crimelabs.net

    consider looking into afs. with OpenAFS , linux and win32 are supported both as clients and servers. other platforms are being worked on (including openbsd, mainly thanks to jim rees), but they're not yet production quality. (the cache manager is not available in a lot of places, as best as i can tell.) however, openbsd does ship with afs code from the arla project.

    anyhow, afs allows for secure access and encrypted transfers along with being scalable for the wide area. far less kookery than ssh pipes for NFS, and no need to open the firewall up for portmap and other rpc services.

  2. By niekze () niekze@nothingkillsfaster.com on http://www.nothingkillsfaster.com

    look at the ugly iptables & ipchains syntax :(

    thank you, pf for not being ugly :)

  3. By cell X () cell_x@hushmail.com on http://www.deadly.org

    I wish SysAdmin Magazine people would realize that openbsd comes with native IPSec abilities..just make tunnels and setup NFS..
    done deal.. =P

    Comments

    1. By niekze () on

      but the article was for the lunix kids...

      Comments

      1. By Anonymous Coward () on

        Ph34r - Phr335w4n 0n lun1X!

        Comments

        1. By lowercase the 'S' () on

          FreeS/WAN is on of the worst IPsec-Implementation out there. It doesn't even have an SPD (security policy database). I'd dare calling FreeS/WAN an IPsec-Implementation.

      2. By Anonymous Coward () on

        DUDE YES!! NIEKZE TOTALLY RIP ON LINUX! SPELLING IT WRONG MEANS FUNNY ENGAGE!!

    2. By Anonymous Coward () on

      But you have to realize that SysAdmin is a _journal_.
      That means that other people submit proposals and manuscripts to the editors.

  4. By Anonymous Coward () on

    A better alternative to tunneling NFS over SSH is just using SFS . SFS encrypts file system traffic, but also handles user authentication properly (unlike this suggestion).

Latest Articles

Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]