Skip to main content

How to enable Secure Network file system (NFS)?

By
66.How to enable Secure Network file system (NFS)?
Ans.
1. The default installation does not uses NFSv4 security enhancement by default.

 2. There are some step to be carried out manually and they are as follow.

 3. Enable secure NFS by adding the following line to /etc/sysconfig/nfs
Secure_NFS=no

 4. Modify /etc/idmapd.conf and set the domain options to user domain and change
Nobody- User & Nobody –group options to nobody
Domain = example.com
[Mapping]
Nobody_User = nobody
Nobody_Group = nobody

 5. For the above changes to be affected, restart the portmapper using following command
#service portmap restart

Labels:

Comments

Post a Comment

Popular posts from this blog

Java,ES,QT practical files

By
All practical files: Click below to start download Uploaded on special request||||
2 comments
Read more

Absolute Links vs. Relative Links – SEO Value

By
Absolute Links vs. Relative Links – SEO Value The debate between  absolute links and relative links  continues to live on in the SEO world. The individual significance of each has been contested, but it is widely regarded that absolute links provide better SEO value on the whole than relative links. Many believe that absolute links have less potential for getting messed up when search engines index your page. It shouldn’t really make a difference, but many conclude that this is reason enough. Read more...
Post a Comment
Read more

What are the server and client security considerations?

By
72.What are the server and client security considerations? Ans. Server security considerations: 1. Always use the root_squash option in /etc/exports. 2. Enabled by default so do not disable it. 3. With root squashing clients root account can’t even access or change files that only server’s root account can change or access. Client security considerations: 1. Disable SUID (set UID) programs on NFS mounts using nosuid option. 2. Prevents server’s root account from creating an SUID root program on an exported FS, logging in to the clients as a normal user, and then using the UID root program to become root on the client.
Post a Comment
Read more