102 Securing NFS in AIX
4.4 NFS Authentication methods
Before planning the NFS V4 authentication method used in your environment, we
suggest reading 3.3, “NFS V4 user authentication” on page 59. With NFS V4,
you have the following choice:
AUTH_SYS
Kerberos
4.4.1 AUTH_SYS method
By default, NFS uses the AUTH_SYS method to authenticate user identities.
Under the AUTH_SYS security flavor, the user is authenticated at the client,
usually via a logon name and password. The NFS server trusts the user and
group identities presented by its clients.
For example, if tight physical security cannot be maintained on a network, it
would be easy for someone to bring in a Linux laptop, set the IP address to be
the same as a valid NFS client, and connect the ...