Hacker News new | ask | show | jobs
by forty 1943 days ago
How do you authenticate to the nfs server? Did you setup kerberos ?

I have always been reluctant to go that path, it felt to complex for my home use case. I generally use ftp instead for this reason, but I guess it's not as efficient.

2 comments

I share my media on an Ubuntu server via NFS - all I've done is set the shared media library as read-only for the devices it's shared with, and specify the (local, reserved) IP it should be sent to. The only authentication is the fact that it's LAN-only, and being sent to the right (local) IP

Kerberos would be far too complex to be warranted here - all that's needed is nfs-kernel-server and /etc/exports on the server side.

Granted, my network is reasonably locked-down (MAC address filtering, (reserved) IP addresses available matching the number of devices on the network), but security beyond that has never really crossed my mind.

I don't password protect the media files on the nfs server - they are visible password-free from any machine on my local network. Of course if someone has sensitive material and/or the local network is shared, say, then some extra setup is needed.

EDIT: another common use-case for me is basically grabbing lots of youtube videos/playlists via youtube-dl, which then lets me watch them on anything and everything than can run kodi commercial-free without jumping through hoops (i.e. browser addons or sideloading third party youtube apps, etc)