I'm an NFS guy, learned it a bit at uwisc and then a lot more at Sun.
But Sun didn't do the Kerberos stuff, at least while I was there.
Didn't Kerberos come from MIT? If so, I bet anything that Ted Ts'o
would know the details. My guess is it was part of project athena
and I think that overlaps with Ted. Yo, Ted, Merry Christmas,
what about this Kerberos authentication stuff? :)
On Tue, Dec 25, 2018 at 05:49:49PM -0700, Grant Taylor via TUHS wrote:
Do any fellow TUHS subscribers have any experience
with NFS, particularly in
combination with Kerberos authentication?
I'm messing with something that is making me think that Kerberos
authentication (sec=krb5{,i,p}) usurps no_root_squash.
Meaning that root can't access files owned by other users with go-rwx.
Almost as if no_root_squash wasn't configured on the export.
Does anyone have a spare bone that they would be willing to throw my way?
--
Grant. . . .
unix || die
--
---
Larry McVoy lm at
mcvoy.com http://www.mcvoy.com/lm