Secure NFS

[maddave]

Hi,
Is there such as thing as secure NFS? I have found one way, but dont thing it will do what I want.

http://www.math.ualberta.ca/imaging/snfs/

Basically, we currently have a remote drive on which is a linux share, mapped to a drive letter in windows, for example drive "M".
All our software is hardcoded to pick files up from the "m" drive.
This uses NFS but we have been told to change our systems to use a more secure method of transfer. Is there such a thing as SNFS available so that we can still use drive letters but transfers are handled in a secure manner?

Thanks.

 

[Chacalinc]

SNFS? it sounds secure... what kind of "security" are you looking for? but why NFS in windows? you can have Samba/CIFS in linux.

http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/ServerType.html#id2526884

one more question, is windows secure?? (lol)

Cheers.

Chacal, Inc.

 

[spamly]

I think that you can make NFS secure with tcpwrappers, but this may be more trouble than it is worth. Anyone out there do this?

 

[ericbrunson]

NFS is insecure because the data is "sniffable" over the network and spoofable by IP and has no user level authentication. You can also spoof your UID on the remote end to get around file access controls.

Samba/CIFS is an option, but I don't think that it's encrypted. There is also userfs/sshfs, but I think that's only available to a Linux client.

You could mount the NFS share over an ssh tunnel, that gets you user level authentication and encryption, but doesn't fix the problem if UID spoofing. That may not be an issue to you, though.

If encryption isn't required, I'd go Samba.