Subject: Re: NFS - RPC client credentials too weak
To: Matt Ragan <matt@ibmoto.com>
From: Irving Reid <irving@platform.com>
List: current-users
Date: 07/13/1995 12:38:57
> Matthias Scheler wrote:
> >you wrote in <199507121900.PAA22487@gould.platform.com>:
> >> or to the Ultrix box to get it to authorize properly?
> >
> >Look for an option for the Ultrix "nfsd" (maybe "-d") to allow
> >mounts from user ports.
> >
> 
> The 'better' way to do this is to use the '-o -P' option to 'mount',
> or the '-P' option to mount_nfs to force NetBSD to use a priveleged
> port.  Doing it the other way opens up security holes.

> Matt Ragan  (matt@ibmoto.com)  Motorola/IBM Somerset PowerPC Design Center

A couple of people have sent this suggestion, but the problem is the 
other way around:  The NetBSD box is the _server_, and Ultrix is the 
client.  The automount daemon is running on Ultrix, talking to mountd 
on NetBSD.

A couple of other people have suggested that root may be in too many 
groups; again, this probably only matters if Ultrix is the server.  In 
any case, root is in eight or fewer groups on both machines.

 - irving -