Skip to main content

Using Kerberos with NFS for strong security

You can use Kerberos to provide strong authentication between SVMs and NFS clients to provide secure NFS communication. Configuring NFS with Kerberos increases the integrity and security of NFS client communications with the storage system.

  • ONTAP support for Kerberos
    Kerberos provides strong secure authentication for client/server applications. Authentication provides verification of user and process identities to a server. In the ONTAP environment, Kerberos provides authentication between storage virtual machines (SVMs) and NFS clients.
  • Requirements for configuring Kerberos with NFS
    Before you configure Kerberos with NFS on your system, you must verify that certain items in your network and storage environment are properly configured.
  • Specifying the user ID domain for NFSv4
    To specify the user ID domain, you can set the -v4-id-domain option.