0
We have an osx desktop Environment with nfs shares and using linux/vm´s as nfs-clients We want to encrpyt the nfs-data/directories on our os-x machines.
Is that possible? Apple´s File-Fault is using kerberos, but file-fault data isnt´ accessible via nfs. Is there a possibility to use file-vault anyway or should we use truecrypt volumes?
How do we setup truecypt/filevault + nfs?
dgAlien
Posted 2010-05-25T10:45:55.123
Reputation: 113
0
There is only one scenario that I can think of where encrypting data on an NSF server makes sense, and that is to protect your data if someone steals the server. The reason is that the filesystem must be unencrypted for the NFS server to work. The only way around this would be if the NSF server itself decrypts data on demand. You would also need to ensure the security of the data over the wire and on the clients.
For the case where it makes sense, put the data on an encrypted disk image created using Disk Utility. Mount the disk when the server boots and startup NSF.
KeithB
Posted 2010-05-25T10:45:55.123
Reputation: 8 506
this is exactly the intention: protection against stealing the harddisks.
I figured out, that FileVault prevents other users, like the build in apache, but not our nfs server settings. This is because, the nfs is activated by a deamon wich runs is started right after a specific userlogin. – dgAlien – 2010-05-27T11:19:43.923