Re: NFSv3 over Secure Shell

From: Darren Moffat (Darren.Moffat@eng.sun.com)
Date: 02/22/02


Date: Thu, 21 Feb 2002 17:32:14 -0800 (PST)
From: Darren Moffat <Darren.Moffat@eng.sun.com>
To: focus-sun@securityfocus.com


> It also has some restrictions since it uses WebNFS mounts you can only
> mount one filesystem from a given server - the first one shared or the one
> that is shared with the public file handle.

I hate following up to my own stuff but....

This restriction isn't correct, and came from my misunderstanding of
the public file handle. By default the public file handle is equivalent
to / on the NFS server so any shared filesystem can be accessed (subdirs
that aren't shared can't be accessed).

There is only a restriction of one filesystem if you use the public share
option to explicitly set the location of the public file handle to something
other than / - which most people don't.

--
Darren J Moffat



Relevant Pages

  • Re: CIFS / Kerberos question
    ... Packet sniffing from a connected hub (for server, ... > I am trying to achieve PKI authentication and SMB access to Windows ... > - Filesystem relies on SSPI-KerberosV to provide security services. ... What exactly does Kerberos do in the server? ...
    (microsoft.public.win2000.security)
  • Re: OT: why no file copy() libc/syscall ??
    ... the mounted filesystem. ... message over the network directly to the server. ... > the remote server implementing the file copy. ...
    (Linux-Kernel)
  • Re: [PATCH] VFS: new fgetattr() file operation
    ... We need this because fstat() semantics can in some cases be better ... implemented if the filesystem has the open file available. ... the server implemented as an unprivileged userspace process running on ... fstatis performed on open file descriptor on client ...
    (Linux-Kernel)
  • [0/5] New POHMELFS release.
    ... This is a new release of the POHMEL filesystem. ... POHMELFS stands for Parallel Optimized Host Message Exchange Layered File System. ... Network filesystem is a client transport. ... Very fast and scalable multithreaded userspace server. ...
    (Linux-Kernel)
  • Re: [PATCH] VFS: new fgetattr() file operation
    ... We need this because fstat() semantics can in some cases be better ... implemented if the filesystem has the open file available. ... the server implemented as an unprivileged userspace process running on ... on a file descriptor obtained when the file was opened. ...
    (Linux-Kernel)