nfsv4 FreeBSD server vs. Linux client I/O error

Rick Macklem rmacklem at uoguelph.ca
Mon Nov 16 16:37:37 UTC 2009



On Mon, 16 Nov 2009, Gerrit Kühn wrote:

>
> Not for me, I do not need the feature. I was only thinking about it
> because the better security of nfsv4 is easily gotten around when you
> allow for the old v3 mounts in parallel.
>

You can use the "sec=" export option to restrict mount points to only
allowing Kerberos (this works for NFSv3 as well as NFSv4) and is what
will give you better security. (It's not an NFSv4 specific feature, it
just happens to be required by the NFSv4 RFC.)

rick


More information about the freebsd-current mailing list