nfs-utils.git/support, branch gss-proxy-mods

nfsd: Add support for the -V and --nfs-version optional arguments

2013-03-25T20:07:59+00:00

Add command line options to enable those NFS versions that are
currently disabled by default. We choose to use the options '-V'
and '--nfs-version' for compatibility with rpc.mountd.

Acked-by: J. Bruce Fields 
Signed-off-by: Trond Myklebust 
Signed-off-by: Steve Dickson

configure: check for libio.h availability

2013-03-25T14:09:12+00:00

On some systems (like uClibc), there isn't a libio.h header.  But it
isn't also needed on them.  So check for the header first.

Signed-off-by: Mike Frysinger 
Signed-off-by: Steve Dickson

Add a default flavor to an export's e_secinfo list

2013-03-25T14:09:11+00:00

The list of security flavors that mountd allows for the NFSv4
pseudo-fs is constructed from the union of flavors of all current
exports.

exports(5) documents that the default security flavor for an
export, if "sec=" is not specified, is "sys".  Suppose
/etc/exports contains:

/a  *(rw)
/b  *(rw,sec=krb5:krb5i:krb5p)

The resulting security flavor list for the pseudo-fs is missing
"sec=sys".  /proc/net/rpc/nfsd.export/content contains:

/a  *(rw,root_squash,sync,wdelay,no_subtree_check,
        uuid=095c95bc:08e4407a:91ab8601:05fe0bbf)
/b  *(rw,root_squash,sync,wdelay,no_subtree_check,
        uuid=2a6fe811:0cf044a7:8fc75ebe:65180068,
        sec=390003:390004:390005)
/   *(ro,root_squash,sync,no_wdelay,v4root,fsid=0,
        uuid=2a6fe811:0cf044a7:8fc75ebe:65180068,
        sec=390003:390004:390005)

The root entry is not correct, as there does exist an export whose
unspecified default security flavor is "sys".  The security settings
on the root cause sec=sys mount attempts to be incorrectly rejected.

The reason is that when the line in /etc/exports for "/a" is parsed,
the e_secinfo list for that exportent is left empty.  Thus the union
of e_secinfo lists created by set_pseudofs_security() is
"krb5:krb5i:krb5p".

I fixed this by ensuring that if no "sec=" option is specified for
an export, its e_secinfo list gets at least an entry for AUTH_UNIX.

[ Yes, we could make the security flavors allowed for the pseudo-fs
a fixed list of all flavors the server supports.  That becomes
complicated by the special meaning of AUTH_NULL, and we still have
to check /etc/exports for whether Kerberos flavors should be listed.
I opted for a simple approach for now. ]

Acked-by: J. Bruce Fields 
Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

mountd: fix checking for errors when exporting filesystems

2012-12-17T21:33:17+00:00

commit 5604b35a61e22930873ffc4e9971002f578e7978
  nfs-utils: Increase the stdio file buffer size for procfs files

changed writes to some sysfs files to be line buffered (_IOLBF) where
they weren't before.  While this probably makes sense, it introduced a
bug.

With fully buffered streams, you don't expect to get an error until you
call fflush(). With line buffered streams you can get the error
from fprintf() et al.

qword_eol() only tests the return from fflush(), not from fprintf().
Consequently errors were not noticed.

One result of this is that if you export, with crossmnt, a filesystem
underneath which are mounted non-exportable filesystems (e.g. /proc)
then an 'ls -l' on the client will block indefinitely waiting for a
meaningful 'yes' or 'no' from the server, but will never get one.

This patch changes qword_eol to test both fprintf and fflush.

Acked-by: J. Bruce Fields 
Signed-off-by: NeilBrown 
Signed-off-by: Steve Dickson

libexport.a: xtab.c no longer needs #include xmalloc.h

2012-12-12T15:32:28+00:00

Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

libexport.a: rmtab.c no longer needs #include xmalloc.h

2012-12-12T15:32:28+00:00

Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

mountd: Avoid unnecessary type conversions

2012-10-30T19:30:08+00:00

Removed a number of Wconversion warnings in the mountd code.

Took the opportunity to eliminate some code duplication.

Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

nfs-utils: Eliminate dereferencing type punned pointers

2012-10-30T19:30:08+00:00

Removed a number of Wstrict-aliasing warnings

Note also that site-local IPv6 addresses are deprecated, and thus
are no longer encountered.

Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

mountd: Add exportent_release()

2012-10-22T13:44:02+00:00

Split out the logic that releases dynamically allocated data in an
exportent.  The junction resolution code will invoke this to clean
up the junction exportent once it has been dumped to the kernel.

Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

Exportfs crashes with long path

2012-10-15T17:07:41+00:00

Acked-by: Bruce Fields 
Signed-off-by: Steve Dickson