Re: nfs exports -- "Learning NFSv4 with Fedora Core 2"

["Bryan J. Smith" <b.j.smith@ieee.org>]

On Mon, 2004-11-22 at 11:30, Bryan J. Smith wrote:Learning NFSv4 with
Fedora Core 2 
> Red Hat CL4 (FC2+) and other distributions take it one step further.  In
> addition to RPCGSS, they integrate in IDMAP and a generic GSS daemon --
> e.g., rpcgssd, rpcidmapd and rpcsvcgssd.  Red Hat was one of the first
> distributors to Kerberosize most of its services, and has now done so
> with GSS/IDMAP -- from FTP to Samba -- in CL4.  Once its new directory
> service (AOL-Netscape Directory Server) is GPL'd in CL5 (FC5+) around
> 2005Apr30, the circle will be complete.  It should be well integrated
> out-of-the-box at that time.

A good introduction on the current capabilities of NFSv4 in Red Hat CL4
(FC2+) is here:  
  "Learning NFSv4 with Fedora Core 2"  
  http://www.vanemery.com/Linux/NFSv4/NFSv4-no-rpcsec.html  

NFSv4 gets easier to firewall/tunnel as everything runs over 2049 when
you use AUTH_SYS.  Other RPC services will be an issue if you deploy
GSSAPI/IDMAP, so it is a "catch-22."


-- 
Bryan J. Smith                                    b.j.smith@ieee.org 
-------------------------------------------------------------------- 
Subtotal Cost of Ownership (SCO) for Windows being less than Linux
Total Cost of Ownership (TCO) assumes experts for the former, costly
retraining for the latter, omitted "software assurance" costs in 
compatible desktop OS/apps for the former, no free/legacy reuse for
latter, and no basic security, patch or downtime comparison at all.



-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.