
Chapter 3. Enhanced security in NFS V4 59
3.3 NFS V4 user authentication
By default, NFS uses the AUTH_SYS method to authenticate user identities.
Alternatively, you can use RPCSEC_GSS (Kerberos) to authenticate users.
3.3.1 AUTH_SYS user authentication
Under the AUTH_SYS security flavor, the user is authenticated at the client,
usually via a logon name and password. The NFS server trusts the user and
group identities presented by its clients. If someone gains administrative control
of an NFS client, or has control of a machine pretending to be a valid NFS client
via IP address spoofing, it is easy to masquerade as any valid NFS user.
For example, ...