diff options
| author | Scott Mayhew <smayhew@redhat.com> | 2017-07-26 14:03:12 -0400 |
|---|---|---|
| committer | Steve Dickson <steved@redhat.com> | 2017-07-26 14:03:12 -0400 |
| commit | e8eb9e14411d9ef95e5eb26065dee7166052448e (patch) | |
| tree | d5f3666aa09588c615d2ef6d81c8a2b7f713a56b | |
| parent | 050153ef6a86ff5ab06ef65be36336824a323779 (diff) | |
| download | nfs-utils-e8eb9e14411d9ef95e5eb26065dee7166052448e.tar.gz nfs-utils-e8eb9e14411d9ef95e5eb26065dee7166052448e.tar.xz nfs-utils-e8eb9e14411d9ef95e5eb26065dee7166052448e.zip | |
systemd: add a blurb about masking rpc-gssd to the man page
This is helpful for users that have a krb5.keytab but do not want to use
secure NFS. Also fixed a typo that appears earlier on the page.
Reviewed-by: NeilBrown <neilb@suse.com>
Signed-off-by: Scott Mayhew <smayhew@redhat.com>
Signed-off-by: Steve Dickson <steved@redhat.com>
| -rw-r--r-- | systemd/nfs.systemd.man | 18 |
1 files changed, 14 insertions, 4 deletions
diff --git a/systemd/nfs.systemd.man b/systemd/nfs.systemd.man index 01801eb..46b476a 100644 --- a/systemd/nfs.systemd.man +++ b/systemd/nfs.systemd.man @@ -79,7 +79,7 @@ unit should be enabled. Several other units which might be considered to be optional, such as .I rpc-gssd.service are careful to only start if the required configuration file exists. -.I rpc-gsdd.service +.I rpc-gssd.service will not start if the .I krb5.keytab file does not exist (typically in @@ -120,10 +120,11 @@ be needed to reduce system load to an absolute minimum, or to reduce attack surface by not running daemons that are not absolutely required. .PP -Two particular services which this can apply to are -.I rpcbind +Three particular services which this can apply to are +.IR rpcbind , +.IR idmapd , and -.IR idmapd . +.IR rpc-gssd . .I rpcbind is not part of the .I nfs-utils @@ -155,6 +156,15 @@ is not needed and not wanted, it can be masked with .RS .B systemctl mask idmapd .RE +.I rpc-gssd +is assumed to be needed if the +.I krb5.keytab +file is present. If a site needs this file present but does not want +.I rpc-gssd +running, it can be masked with +.RS +.B systemctl mask rpc-gssd +.RE .SH FILES /etc/nfs.conf .br |