Xref: utzoo comp.unix.admin:413 comp.unix.questions:26607
Path: utzoo!attcan!uunet!zaphod.mps.ohio-state.edu!usc!apple!agate!darkstar!ucscc.UCSC.EDU!haynes
From: haynes@ucscc.UCSC.EDU (99700000)
Newsgroups: comp.unix.admin,comp.unix.questions
Subject: Re: Network-wide Mail Spool?
Message-ID: <8368@darkstar.ucsc.edu>
Date: 31 Oct 90 18:37:52 GMT
References: <924@iiasa.UUCP>
Sender: usenet@darkstar.ucsc.edu
Reply-To: haynes@ucscc.UCSC.EDU.UUCP (Jim Haynes)
Followup-To: comp.unix.admin
Organization: University of California, Santa Cruz  CATS
Lines: 15

One thing you have to consider here is whether security is going to be
a problem.  With ordinary NFS any workstation on which the user can
become root allows the user to impersonate any other user and read
the mail.
I guess 'secure NFS' is a way around this.  We're planning to use the MIT
Project Athena technology, in which mail is delivered to post-office
machines.  The users at workstations access it from there using a
Kerberos-authenticated POP protocol.  Another Athena component, Zephyr,
is used for incoming mail notification.
haynes@ucscc.ucsc.edu
haynes@ucscc.bitnet
..ucbvax!ucscc!haynes

"Any clod can have the facts, but having opinions is an Art."
        Charles McCabe, San Francisco Chronicle