nfs-utils.git/aclocal, branch fixrootccache

Avoid clobbering root's ccache if possible

2017-11-16T21:28:28+00:00

If the gssapi library is modern enough, store the ccache in a process
scoped keyring by default. This will avoid clobbering root's default
ccache, and keep the creds from littering the filesystem.

Signed-off-by: Simo Sorce

gssd: always call gss_krb5_ccache_name

2016-04-29T14:38:02+00:00

Previously the location of the credential cache was passed in either
using environment variable KRB5CCNAME or gss_krb5_ccache_name() if
supported. For threaded-gssd, we can't use an environment variable
as it's shared among all thread. Thus always use the api call.

Reviewed-by: Steve Dickson 
Signed-off-by: Olga Kornievskaia 
Signed-off-by: Steve Dickson

gssd: use pthreads to handle upcalls

2016-04-29T14:37:53+00:00

Currently, to persevere global data over multiple mounts,
the root process does not fork when handling an upcall.
Instead on not-forking create a pthread to handle the
upcall since global data can be shared among threads.

Reviewed-by: Jeff Layton 
Signed-off-by: Olga Kornievskaia 
Signed-off-by: Steve Dickson

Remove rpcsecgss library support

2016-04-29T14:33:42+00:00

librpcsecgss has not been used in years
so and there is no longer an upstream for
it so the support for the library has
been removed

Signed-off-by: Steve Dickson

Allow gssd and svcgssd to set the libtirpc debug level

2015-11-02T13:55:04+00:00

The interface for controlling the debug level in libtirpc was added
over a year ago, but nothing's taking advantage of it.

Signed-off-by: Scott Mayhew 
Signed-off-by: Steve Dickson

nfsidmap: Use find_key_by_type_and_desc() if available

2015-09-16T15:21:41+00:00

Recent versions of libkeyutils have find_key_by_type_and_desc()
which replaces the open-coded keyring search in keyring_clear().

I don't quite understand what's going on in key_invalidate(),
so I didn't touch it.

Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

configure: restore checking for authgss_free_private_data in libtirpc

2015-01-23T15:09:13+00:00

Since commit 8534063 (configure: use pkg-config to find libtirpc), we
are missing the check for authgss_free_private_data in libtirpc.

Restore this check, and adapt so that it works in both the pkg-config
case and in the "old code" case.

Signed-off-by: "Yann E. MORIN" 
Cc: Chuck Lever 
Cc: Steve Dickson 
Signed-off-by: Steve Dickson

configure:restore the old way of checking for libtirpc

2015-01-23T15:09:13+00:00

Since 8534063 (configure: use pkg-config to find libtirpc), we use
pkg-config to check for libtirpc (he!).

As reported on the list, some user do not have the libtirpc registered
with pkg-config (even though it has been since at least 0.1.8).

So, partially restore the old checking code, as it was before 8534063,
but adapted to work with the pkg-config check, and also adapted to only
use proper macros (AS_IF) instead of shell constructs.

Re-introduce that old code in a separate function, so it is easy to get
rid of when we only want to support pkg-config in the future (i.e. when
virtually all libtirpc versions in the wild have been properly
installed).

Reported-by: Chuck Lever 
Signed-off-by: "Yann E. MORIN" 
Cc: Steve Dickson 
Signed-off-by: Steve Dickson

configure: be more laxist on the required libtirpc version

2015-01-23T15:09:13+00:00

Currently, we check for libtirpc >= 0.2.4 with pkg-config, because that
is the one version I had to test against.

As reported on the list, however, older versions are also supported.

Relax the check to not require a version at all, and accept any version
of libtirpc.

Reported-by: Chuck Lever 
Signed-off-by: "Yann E. MORIN" 
Cc: Steve Dickson 
Signed-off-by: Steve Dickson

configure: use pkg-config to find libtirpc

2014-12-13T15:16:38+00:00

Currently, we use a custom function to find libtirpc's headers and
libraries. This works fine for shared linking.

But for static linking, this forgets to link with -lpthread, which is
required by libtirpc.

A recent patch was sent to libtirpc to add that missing -lpthread in its
Libs.private section of its .pc file. Thus, pkg-config will soon be able
to return the appropriate libraries.

So, use pkg-config to find libtirpc.

And for older libtirpc versions, there is no change in behaviour: we're
still missing the -lpthread. But once libtirpc has been fixed, we'll
automatically get that missing library for free!

Remove the --with-libirpc flag as it is no longer needed: pkg-config
will provide us with the -I and -L flags, now.

Signed-off-by: "Yann E. MORIN" 
Signed-off-by: Steve Dickson