[3288] in Kerberos
Re: What is Kerberized NFS?
daemon@ATHENA.MIT.EDU (Paul J Lustgraaf)
Tue May 17 18:53:11 1994
To: kerberos@MIT.EDU
Date: 17 May 1994 17:24:00 GMT
From: grpjl@iastate.edu (Paul J Lustgraaf)
Nick Eggleston <nick@ucunix.san.uc.edu> wrote:
>What does Kerberized NFS give me? Does it make users id themselves
>before accessing files? Does it prevent root from becoming another
>user and accessing his files? Thanks,
Users need to present valid Kerberos tickets to the NFS server at
MOUNT time (only). In most cases root can still pretend to be a
user by picking up the ticket from the /tmp directory (or wherever).
Various ways around this have been proposed, but I don't know that
anything has ever been agreed on.
--
Paul Lustgraaf "It's easier to apologize than to get permission."
Network Specialist Grace Hopper
Iowa State University Computation Center grpjl@iastate.edu
Ames, IA 50011 515-294-0324
