[OpenAFS] the future
Mon, 1 Oct 2012 12:05:44 -0700
> On Mon, Oct 1, 2012 at 5:52 AM, Chas Williams (CONTRACTOR)
> <firstname.lastname@example.org> wrote:
>> we are running lustre alongside afs right now. lustre is generally
>> much much faster than afs.
Lustre is a replacement for AFS in the same way that a formula 1 race
car is a replacement for your family mini-van.
There are many similar solutions out there ( GlusterFS, etc... ) that
address parts of the problem, but
none that I see make any effort at security better than NFS v3. They
all pretty much allow the machine
to assert any userid it wants.
If the problem you have is
"Share a user's home directory on a machine that you don't entirely
trust root on"
the only solution I know of is AFS or NFS V4. And if the problem is
"Access a filesystem securely from just about anywhere on almost any OS"
then OpenAFS is the only solution I know about.
- Booker C. Bense
- For the sake of argument, we will assume AFS encryption is "good enough".