Re: openbsd yp security

["David S." <davids_(_at_)_idiom_(_dot_)_com>]

> In an environment using YP and NFS mounted homes, would it be simple to
> masquerade as another uid??  If the server has nothing to do with
> authenticating, yet trusts the client to report it's uid correctly...
> that seems pretty dodgy!!

Which is why to some people NFS is an acronym for "No File Security".
There are some implementation of NFS that require authentication via
a Kerberos ticket or a public key before a client can access an
exported file system.  Don't think any of those are supported by
OpenBSD, though.

David S.