Replacement for NFS ?

[Ollie R]

Samba / CIFS ???

[Dr. Peer-Joachim Koch]

Sorry,

I pressed the enter key to fast ....

Well, I wanted to ask, what would be a good choise to replace NFS (2,3). In our institute
some people do not like nfs, because the security
level is not very high. Everybody with a pc
and a liunx running from a cd-rom would be able
to see and change nfs filesystems (%HOMES).
smbfs ?
openafs ?
NFS 4 ?

What is your preferred solution ?

Thanks, Peer

p.s. We haven't had any problems in the last years ....

[Suresh Patoria]

Hi,

If you all the Unix flavor machine then you better to use NFS

If you have the some of the windows machine then you use SAMBA / CIFS

If you want the security then you implement the sytem secutrity like setuid, setgid and share the resources with restrication

If you use the samba then you can create the domain and you can put the user level security

[Paula J Frazer-Campbell]

Hi

On NFS you can set the export levels and define which macines can mount the export.

Are you looking for specific secutity settings?

Paula

[Pete Randall]

Peer,

Have a look at this thread concerning NFS and SSH:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xe0963f9a15add711abdc0090277a778c,00.html


Pete

[Krishna Prasad]

I would go with Samba/CIFS for two reasons. It has more security options then NFS. Second - Samba will talk to more Operating Systems for free.

You can acutally turn a Linux/Unix box into a Windows 2K print and file server!

[Steven E. Protter]

The big current problem with NFS is it transmits disk information across the network just like it is on the disk. No encryption.

CIFS/9000 is a good replacement. Its really hard to totally get rid of NFS, because Ignite uses it, but CIFS/9000 Samba is a better choice for almost any disk sharing.

Windows has a Samba/CIFS client built in btw.

Link:
Server
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B8725AA
Client
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B8724AA

Note the price: Free!
SEP

[Dr. Peer-Joachim Koch]

Hi,

thanks to all for the helpfull hints.
The main problem from our point of view is
that every user can take a linux cd and use
the root account to mount file
systems, look for information and/or
destroy it (create the uid=s, su -> rm).

I think ssh is fine, but a better solution would be, that only boxes with a certificated are allowed to mount a file system.
Therefore only CIFS or OPENAFS (is anybody
using it ?) would be a good choise.
But OPENAFS can be better distributed
onto multiple machines (CIFS can not use
one alias for a couple of machines).
It's also importnat for us - we have already
terabytes of data at ONE node, that's also
not the best solution.

Thank's a lot, Peer