From owner-freebsd-questions Wed Jan 31 09:36:30 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id JAA19417 for questions-outgoing; Wed, 31 Jan 1996 09:36:30 -0800 (PST) Received: from phaeton.artisoft.com (phaeton.Artisoft.COM [198.17.250.211]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id JAA19406 for ; Wed, 31 Jan 1996 09:36:21 -0800 (PST) Received: (from terry@localhost) by phaeton.artisoft.com (8.6.11/8.6.9) id KAA09982; Wed, 31 Jan 1996 10:34:02 -0700 From: Terry Lambert Message-Id: <199601311734.KAA09982@phaeton.artisoft.com> Subject: Re: NFS in Sun environment To: jeffa@sybase.com (Jeff Anuszczyk) Date: Wed, 31 Jan 1996 10:34:02 -0700 (MST) Cc: questions@freebsd.org, jeffa@sybase.com In-Reply-To: <9601301929.AA19233@teak.sybase.com> from "Jeff Anuszczyk" at Jan 30, 96 02:29:11 pm X-Mailer: ELM [version 2.4 PL24] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-questions@freebsd.org Precedence: bulk > I think I understand the weak authentication problem that NFS on non-Sun > platforms has when trying to mount a Sun exported NIS NFS disk. So, since > I don't run the Sun servers I'm trying to work around this. One of the > things that we do have is pcnfsd running to allow PC's to authenticate > themselves when they want to mount NFS stuff. Usually this is intended > for product like Netmanage ChameleonNFS. > > Is there any way that I can convince mount to contact a pcnfsd for > authentication when doing a mount to a Sun System? This would allow me > to get around this problem using an already existing solution. If not, > any ideas how hard it would be to cobble up a mount_nfs to do this? man mount_nfs: [ ... ] -P Use a reserved socket port number. This is useful for mounting servers that require clients to use a reserved port number on the mistaken belief that this makes NFS more secure. (For the rare case where the client has a trusted root account but untrusworthy users and the network cables are in secure areas this does help, but for normal desktop clients this does not apply.) Terry Lambert terry@lambert.org --- Any opinions in this posting are my own and not those of my present or previous employers.