Explain Network File System V 4 (NFSv4).

56.Explain Network File System V 4 (NFSv4).
Ans.
1. NFS version 4, offers better security and performance enhancement over previous versions of NFS protocols.

2. NFSv4 incorporates RPCSEC-GSS security, which makes it possible to encrypt the data stream transmitted between NFS client and server.

3. To increase performance, NFSv4 makes complete use of client-side caching to reduce the frequency with which clients must communicate with an NFS server. It increases overall performance by minimizing the number of server round tips.

4. NFSv4 extends its support to ACL (Access control list).

5. Although it is interoperable with NFSv3 but its clients cannot
mount NFSv2 Exports.

6. NFSv4 enhances performance over internet even on low bandwidth network connections.

7. NFSv4 also supports UTF-8 filenames making cross-platform and inter-character set file sharing more comfortable.

Comments

Java,ES,QT practical files

All practical files: Click below to start download Uploaded on special request||||

Vidyalankar Question paper solutions

Download from their website: http://www.vidyalankar.org/index.aspx or just click here to download

Discuss security issues in Network File system.

71.Discuss security issues in Network File system. Ans. 1. NFS protocol version 3 and older have some security problems that make it unsuitable for use across the Internet and potentially unsafe for use even in trusted network. 2. One NFS weakness, in general terms, is the /etc/exports file, if a cracker is able to spoof or take over a trusted address, an address listed in /etc/exports then your exported NFS mount are accessible. 3. NFS has normal Linux file system access controls that take over once a client has mounted an NFS export, once this happens normal user and group permissions on the files take over access control. 4. The 1st way to defense is to use host access control, to limit access to services , particularly the portmapper, which has long been target of exploits attempts. 5. For this add the entries in /etc/hosts.clevy lockd, statd, mountd and rquoted. 6. Careful use of IS packet firewall, using netfilter, dramatically increases NFS server security. ...

Ultimate IT solutions

Search This Blog