Hmm, does that enable strong authentication of the users making RPC requests? Or does the server still have to trust that the client making RPC requests is bein

Hmm, does that enable strong authentication of the users making RPC requests? Or does the server still have to trust that the client making RPC requests is being honest? Specifically I wonder if the client is compromised, is it able to start making RPC requests for any arbitrary user (as with AUTH_SYS), or only for any user who uses their own credentials to establish a security context (as with RPCSEC_GSS)? Forgive my imprecise terminology here, I'm clearly not an NFS/RPC expert! :) [edit] Ah, I see this is addressed in Sec. 7 - never mind. It looks like you still need to use GSS on top of this scheme in order to prevent a compromised client from impersonating any user.