nfs-utils.git, branch gss-proxy-mods

Allow GSSAPI to try to acquire credentials first.

2013-04-05T22:39:10+00:00

GSSAPI can be given a uid number as a special name, and then
gss_acquire_cred() can use the name to try to find credentials for
the user.

Give GSSAPI a chance to do it on its own, then fallback to the classic
method of trolling through the file system to find a credential cache.

Document new -z/-Z options

2013-04-05T22:39:10+00:00

Options are not in alphabetical order but -z/-Z clearly always come last.

Signed-off-by: Simo Sorce

Avoid reverse resolution for server name

2013-04-05T22:39:10+00:00

A NFS client should be able to work properly even if the DNS Reverse record
for the server is not set. There is no excuse to forcefully prevent that
from working when it can.

This patch adds a new pair of options (-z/-Z) that allow to turn on/off
DNS reverse resolution for determining the server name to use with GSSAPI.

To avoid breaking current behavior the option defaults to off by default,
ideally we will turn this on by default after a transition period.

Signed-off-by: Simo Sorce

Fix double free when exporting lucid context

2013-04-05T22:39:10+00:00

When using GSSAPI's gss_krb5_export_lucid_context the context passed into the
function is actually deleted during the export (to avoid reuse as the context
contains state that depends on its usage).
Change the code to pass in a pointer to the context so that it can be properly
NULLed if we are using the GSSAPI context and following calls to
gss_delete_sec_context will not cause double free errors and segfaults.

Signed-off-by: Simo Sorce

gssd: Fix segfault when using -R option

2013-04-02T19:08:17+00:00

The getopt string did not add : after the R option resulting in a
sefgault whenever -R was used as optarg is NULL and it is dereferenced.

Signed-off-by: Simo Sorce 
Signed-off-by: Steve Dickson

gssd: Switch to use standard GSSAPI by default

2013-04-02T19:08:17+00:00

Make libgssglue configurable still but disabled by default.
There is no reason to use libgssglue anymore, and modern gssapi
supports all needed features for nfs-utils.

Signed-off-by: Simo Sorce 
Signed-off-by: Steve Dickson

gssd: Add configure check for gss_krb5_free_lucid_sec_context().

2013-04-02T19:08:17+00:00

Signed-off-by: Simo Sorce 
Signed-off-by: GÃnther Deschner 
Signed-off-by: Steve Dickson

nfsd: Add support for the -V and --nfs-version optional arguments

2013-03-25T20:07:59+00:00

Add command line options to enable those NFS versions that are
currently disabled by default. We choose to use the options '-V'
and '--nfs-version' for compatibility with rpc.mountd.

Acked-by: J. Bruce Fields 
Signed-off-by: Trond Myklebust 
Signed-off-by: Steve Dickson

rpcdebug: do not use build toolchain

2013-03-25T14:09:12+00:00

The rpcdebug program gets installed, so we don't want to use the build
toolchain to compile it.  I can't find any scripts in the build system
that try to execute it, so this shouldn't be a problem.

Signed-off-by: Mike Frysinger 
Signed-off-by: Steve Dickson

configure: check for libio.h availability

2013-03-25T14:09:12+00:00

On some systems (like uClibc), there isn't a libio.h header.  But it
isn't also needed on them.  So check for the header first.

Signed-off-by: Mike Frysinger 
Signed-off-by: Steve Dickson