From: Lucio De Re <lucio@proxima.alt.za>
To: 9fans@cse.psu.edu
Subject: Re: [9fans] secstore
Date: Wed, 15 May 2002 14:16:31 +0200 [thread overview]
Message-ID: <20020515141630.O1584@cackle.proxima.alt.za> (raw)
In-Reply-To: <80dc9d46780953d37104e05c11fbed0f@9fs.org>; from nigel@9fs.org on Wed, May 15, 2002 at 12:58:16PM +0100
On Wed, May 15, 2002 at 12:58:16PM +0100, nigel@9fs.org wrote:
>
> So a suitable solution for a combined cpu/auth server would be to use
> kfs and bind it over /adm/secstore for the secstored process only?
>
I doubt it. It smacks of "security by obscurity" as other users on
the CPU server would be able to mount it too. I think that, like
Kerberos, the auth server ought to be a physically secured unit.
Of course, you may not need such paranoia, but in a technical sense at
least, that would be mandatory.
++L
next prev parent reply other threads:[~2002-05-15 12:16 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-05-15 11:58 nigel
2002-05-15 12:16 ` Lucio De Re [this message]
-- strict thread matches above, loose matches on Subject: below --
2002-05-15 18:22 rsc
2002-05-15 16:31 presotto
2002-05-15 16:30 jmk
2002-05-15 16:23 presotto
2002-05-15 15:36 anothy
2002-05-15 15:02 presotto
2002-05-15 14:15 rob pike, esq.
2002-05-15 14:43 ` Lucio De Re
2002-05-15 14:14 presotto
2002-05-15 14:37 ` Lucio De Re
2002-05-15 13:33 presotto
2002-05-15 13:59 ` Lucio De Re
2002-05-15 12:33 presotto
2002-05-15 13:09 ` Lucio De Re
2002-05-15 12:26 nigel
2002-05-15 12:17 presotto
2002-05-15 11:55 presotto
2002-05-15 11:45 forsyth
2002-05-15 11:19 nigel
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20020515141630.O1584@cackle.proxima.alt.za \
--to=lucio@proxima.alt.za \
--cc=9fans@cse.psu.edu \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).