[SSSD] GSSAPI and Kerberos - understanding question

John Hodrien J.H.Hodrien at leeds.ac.uk
Thu Dec 1 15:58:58 UTC 2011


On Thu, 1 Dec 2011, Ondrej Valousek wrote:

> And how does it affect security? Easily - if you declare nfs/ UPN principal
> for deneb and nfs/ SPN principal for polaris, you making sure that only
> polaris can be used as a NFS server and deneb as a NFS client and not
> vice-versa.

NFS is a freaky oddity though.  You've done nothing to stop me running pretty
much any other service I like.

jh



More information about the sssd-devel mailing list