LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-28-2009, 12:22 PM   #1
cotton213
LQ Newbie
 
Registered: Dec 2004
Location: Michigan
Distribution: Slackware, Red Hat, Ubuntu
Posts: 23

Rep: Reputation: 1
Filesystem security: NFSv4 vs AFS vs...?


My small company is currently using NFS v3 on our primary file servers and we need to switch to something more secure for our mixed Linux (80%) Windows (20%) environment. I'd like opinions on some of the various filesystems out there -- maturity, ease of setup and use, availability of clients, speed. Googling seems to mostly get me articles from 2003 and I seem incapable of searching this forum effectively (sorry). We are looking mostly at NFS v4, Samba/CIFS, and AFS. Any insight is greatly appreciated.

Barb
 
Old 08-02-2009, 02:36 PM   #2
edgester
LQ Newbie
 
Registered: Aug 2009
Posts: 3

Rep: Reputation: 0
Quote:
Originally Posted by cotton213 View Post
My small company is currently using NFS v3 on our primary file servers and we need to switch to something more secure for our mixed Linux (80%) Windows (20%) environment. I'd like opinions on some of the various filesystems out there -- maturity, ease of setup and use, availability of clients, speed. Googling seems to mostly get me articles from 2003 and I seem incapable of searching this forum effectively (sorry). We are looking mostly at NFS v4, Samba/CIFS, and AFS. Any insight is greatly appreciated.

Barb
Hi Barb,

I'm not sure how well NFSv4 would work on windows with good security. Most places want to firewall NFS and SMB from off-site.

SMB is mature, but migrating your data to a another server when the server gets full can be a pain.

AFS is very mature. It has been around for over 10 years. The OpenAFS project (http://www.openafs.org) is the dominant AFS platform. There are AFS clients for Windows, Linux, Solaris, MacOS X, BSD, AIX, and a few others. You can run AFS servers on almost any Unix-like platform (Linux and Solaris are the most popular OpenAFS server platforms).

While AFS has a bit of a learning curve, it gives you SAN-like features like snapshots and live migrations of data between servers using commodity hardware and disks. No SAN is required. AFS also has can also host multiple read-only copies of data for redundancy. AFS has advanced caching so that frequently access data doesn't require re-fetching from the server.

AFS also has per-directory access control lists, user-managed access groups, and optional encryption (which does degrade performance). AFS is very well suited to WAN and LAN environments. It uses Kerberos as the authentication layer.

Oh, and did I mention that migrating data between servers is nearly transparent to users and doesn't require any reconfiguration?

Feel free to post any questions you may have to the openafs-info list at https://lists.openafs.org/mailman/listinfo/openafs-info

There are many helpful people there, including myself, who can answer any questions that you may have and help you make the right choice (even if it isn't AFS), and help you to get started.

Thanks,
Jason
 
Old 08-02-2009, 07:55 PM   #3
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Rocky 9.2
Posts: 18,348

Rep: Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749
For security aspect, you could look at sshfs: http://en.wikipedia.org/wiki/SSHFS
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Apache - Filesystem Security ddaas Linux - Networking 3 01-23-2009 09:18 AM
Question on filesystem security and apache rcase5 Linux - Server 3 02-26-2007 04:06 PM
AFS Client djgerbavore Linux - Software 1 01-10-2005 09:19 AM
Afs filburt1 Linux - Software 8 11-15-2004 05:42 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:26 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration