nfs-utils.git/utils, branch master

Provide macros for non-standard gss symbols

2013-03-26T16:20:45+00:00

libgsglue uses non standard name for mechanism specific extensions to gssapi
which normally have gss_krb5_* names.
Provide symbol substitution headers so that nfs-utils can be compiled both
against libgssglue and the native GSSAPI implementation.

Signed-off-by: Simo Sorce

Switch to use standard GSSAPI by default

2013-03-26T16:15:19+00:00

Make libgssglue configurable still but disabled by default.
There is no reason to use libgssglue anymore, and modern gssapi
supports all needed features for nfs-utils.

Signed-off-by: Simo Sorce

nfsd: Add support for the -V and --nfs-version optional arguments

2013-03-25T20:07:59+00:00

Add command line options to enable those NFS versions that are
currently disabled by default. We choose to use the options '-V'
and '--nfs-version' for compatibility with rpc.mountd.

Acked-by: J. Bruce Fields 
Signed-off-by: Trond Myklebust 
Signed-off-by: Steve Dickson

mountd: regression in crossmounts

2013-03-25T14:09:11+00:00

commit 8e2fb3fc cause a regression in mount export
that are on different local file system.
Exports like (all on different filesystems)

/home *(rw,fsid=0,crossmnt)
/home/fs1 *(rw,crossmnt)
/home/fs1/fs2/fs3 *(rw,nohide)

and then a mount of the root 'mount /home /mnt'
would end up mounting /home/fs1/fs2/fs3 not /home

Reverting the logic of commit 8e2fb3fc until
a better solution can be found for the original
problem.

Signed-off-by: Steve Dickson

NFS man page patch that moves nordirplus/rdirplus

2013-03-25T14:09:11+00:00

NFS man page patch that moves nordirplus/rdirplus from "Options for NFS
versions 2 and 3 only" to "Options supported by all versions".  Its a
better fit here since this option is also needed for some NFSv4 servers.

Signed-off-by: Chris Vogan 
Signed-off-by: Steve Dickson

gssd: gethostname(3) returns zero or -1, not an errno

2013-03-25T14:09:11+00:00

According to "man gethostname," gssd is handling the return value of
gethostname(3) incorrectly.  It looks like other gethostname(3) call
sites in nfs-utils are already correct.

Acked-by: J. Bruce Fields 
Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

gssd: Fix whitespace nits

2013-03-25T14:09:11+00:00

Acked-by: J. Bruce Fields 
Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

gssd: Clean up gssd_setup_krb5_user_gss_ccache()

2013-03-25T14:09:10+00:00

Remove a contradictory portion of the block comment documenting
gssd_find_existing_krb5_ccache().  This should have been removed by
commit 289ad31e, which reversed the meaning of the function's return
values.

Note that, in user space, typically errno's are positive.  But here
we follow the kernel convention of using negative values to return
error codes.  Make the documenting comments explicit about the sign
of an error return -- it will never be positive in the case of an
error.

And a nit: At the last return statement in
gssd_setup_krb5_user_gss_ccache(), "err" always contains zero, as
far as I can tell.  Make it explicit (to human readers) that when
execution reaches this point, gssd_setup_krb5_user_gss_ccache() is
going to return "success."

Reviewed-by: Jeff Layton 
Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

gssd: Update description of "-l" option

2013-03-25T14:09:10+00:00

Move most of the text in the description of the "-l" option up to
the DESCRIPTION section, to match what was done for "-n" and "-k".

The discussion is then less restricted by formatting, and we can
take the space to introduce a few concepts before describing the
behavior of rpc.gssd.

Fix a few misspellings and grammar issues while here.

Acked-by: J. Bruce Fields 
Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson

gssd: Clarify use of the term "machine credentials" in rpc.gssd(8)

2013-03-25T14:09:10+00:00

Our NFSv4 implementation uses machine credentials for operations
that manage state on behalf of the whole client (for example,
SETCLIENTID or RENEW).  The rpc.gssd man page is missing a
description of this usage, especially in the discussion of the "-n"
option.

The issue is that rpc.gssd's "-n" option requires root to acquire a
user credential.  In the absense of a system keytab (for instance,
if the system is diskless) root's credential is not to be used as
the machine credential that manages NFSv4 state.

Group the discussion of machine credentials and UID 0 in one place
to help clarify the discussion and simplify the description of
several of these options.

Acked-by: J. Bruce Fields 
Signed-off-by: Chuck Lever 
Signed-off-by: Steve Dickson