Received-SPF: pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Chuck Lever III <chuck.lever@oracle.com>
To:     Aram Akhavan <aram@nubmail.ca>
CC:     Linux NFS Mailing List <linux-nfs@vger.kernel.org>
Subject: Re: Why does nfs-client.target include rpc.svcgssd?
Thread-Topic: Why does nfs-client.target include rpc.svcgssd?
Thread-Index: AQHY0q7LdmAJrj2LI02IlQESddXsYq32nPaA
Date:   Thu, 29 Sep 2022 16:33:37 +0000
Message-ID: <3F31CA77-623F-4A37-85D5-DA955022F808@oracle.com>
References: <589498d2-6cac-47bd-8e93-8fdd44e4be45@nubmail.ca>
In-Reply-To: <589498d2-6cac-47bd-8e93-8fdd44e4be45@nubmail.ca>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?mc6IctSlMvsdlWo42IuNgLxHjuNcIItW+CeiVuapyYTisDeRHJ8eD5VOKFCj?=
 =?us-ascii?Q?+e1aV+d3MBvKwRrhGqpE1k0odF85ov40o0P3fuoKBxSTaPfDwDNGs6aIRW8K?=
 =?us-ascii?Q?lrS+tQRiWWCTcFQ2b28U9bvAYJ8TXp6od0bpzCad4ut/dJv9Uhzlb33QL6U/?=
 =?us-ascii?Q?AIsd4qav7dNoEcPmjUEN5v1dI15bBW4/aNWW79sJRdwo0XNOBEQnCR4Wkvdu?=
 =?us-ascii?Q?KTb48wkKkZg+tHdr739O2GBnia1BL0ox5UUSSrTEtP6K1BPIrJumgrFfvqi1?=
 =?us-ascii?Q?keRYPj9smty7UOpx0HoPpsQBipA1OBqQvMVwUP+BB1gOeSEIPawjSaVwNhTA?=
 =?us-ascii?Q?mRYQ8F6s5CK4qugc3lu76QoxzftCeZYmxFZEO39kuuCrDE3kc8ffcZlmHK0Z?=
 =?us-ascii?Q?YpJzYr2CFUMK6xc4xP+K0xiEcv+Scd5FYqxE0nvKOqYP6MXsw6S31mZagsl4?=
 =?us-ascii?Q?t+LNqsa+c1LZN2UJjtF9LT4laaRV5NBiBzLxrtDYTFm8IYKlpOGravMqo99b?=
 =?us-ascii?Q?cds4yvY0xTmMj2W0Sc6qLvJVKOrHYZOCjK32iDDm2nuBJH1jUZXBDxQK8QA0?=
 =?us-ascii?Q?hs6lnOiyhLL20tvyYmiK8AT6Vsf0vwlBkS6aL9Z6f7+05g4h5senQbSSIqXj?=
 =?us-ascii?Q?mxiFH2IrxXQsBvWkfmx5arP522J9RqKKtaFN13TYO7OlBbsyVSBT/NTxRG4E?=
 =?us-ascii?Q?NaD/po0t5oXoJPUszYm6MwOtYQhJjN7DDQ9OKyQcEhFc+1DxANX4qW/HksNx?=
 =?us-ascii?Q?s0PIR6Jtypvs7WC84Cp1DdB6YRjpEnKgc8JYdNSx/XjcuWxnapxOrw333v/4?=
 =?us-ascii?Q?RVcZdoFKxw+oTiZeMfaazaUpIRogVbI9JywxPuvdLJKzwgarZQ831L2MDkW/?=
 =?us-ascii?Q?OCJK48EyZm/rzymvbwF7SxtDHua6SoZJ+02cFKXuTC/x/NpnC/ojSmwO2SFQ?=
 =?us-ascii?Q?jxPlh/ggHfSXF0REo+xrU8vmddeFx88+dyjqeWGgWP3XevDZga010eaTClaX?=
 =?us-ascii?Q?/us94yiEghmWxpNxxCdolFCTpCsB/c9J1ONW1anjKdeOeze9AyHEeOaRKzxW?=
 =?us-ascii?Q?UVaGTnf3uejFIaHhH7zNVp4d2EubYss05sSZ6PZ3+iCT+9XvzgW3kSiZN/QZ?=
 =?us-ascii?Q?nLJsbfkF5+zcbcXgDFyOy1/JRb9wFBe081PwHJLUw/UQx1kIZRgOSFBgpzBu?=
 =?us-ascii?Q?lDLrzdUYaShBumre3PcxY3A5OfAGdmDJ/a7i7nyCB28u8xGcmY7aojeiSrWd?=
 =?us-ascii?Q?flqeXp6eaw/sHi3WHHlJoVKqJZO5YPAbzfqifwJtJvVBOWhIISZ4oew40ay1?=
 =?us-ascii?Q?aAHY9icka99/I5noE7elHnZ5hraF7tkCTJL5vN4MtBqQLQATrBkpVPyZoKHE?=
 =?us-ascii?Q?vfq8EIOMPbZs8JlngOjBK0lTtEJF3KwM3t6f74oc7JrIGV58SHTSia9DV0Ou?=
 =?us-ascii?Q?eHMr83xQws1SojBYUfJzM/es9u8jIBIr2N+SCkH3GfUmL3+PCbRm5sKPxn9J?=
 =?us-ascii?Q?RLrcDre1uUj885gDGyPit3dHvQrM9gCxmdy22LC0qc1/ubQ1WhviroxA2yEt?=
 =?us-ascii?Q?OpkCaEtVGCrPvVg1bLzRvPTh/Zsq9n/Gi+O0hgdic1+eD4OYeAE4PnqXyUK4?=
 =?us-ascii?Q?EA=3D=3D?=
Content-Type: text/plain; charset="us-ascii"
Content-ID: <B8F4BC30F698C34C8F238E6211C2E1BC@namprd10.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0PR10MB5128.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ad5e6268-a8fa-4d8b-37a2-08daa2385c6c
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Sep 2022 16:33:37.8498
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 8l8LO6ypIktDVX7RIELYYt93olyvGUAlwHgCLzIBsEcEVfM2Ojj2BdItVZxhzkgiImMw606zwWrtjK8tun6ATA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH0PR10MB5369
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.205,Aquarius:18.0.895,Hydra:6.0.528,FMLib:17.11.122.1
 definitions=2022-09-29_09,2022-09-29_03,2022-06-22_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxscore=0 malwarescore=0 phishscore=0
 suspectscore=0 adultscore=0 bulkscore=0 mlxlogscore=999 spamscore=0
 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2209130000
 definitions=main-2209290104
X-Proofpoint-GUID: q_aCsfZt5mT61_4svNnFeRz5q_bvYNBR
X-Proofpoint-ORIG-GUID: q_aCsfZt5mT61_4svNnFeRz5q_bvYNBR
X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,
        RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE autolearn=ham
        autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-nfs.vger.kernel.org>
X-Mailing-List: linux-nfs@vger.kernel.org


> On Sep 27, 2022, at 4:21 PM, Aram Akhavan <aram@nubmail.ca> wrote:
>=20
> Hi all,
>=20
> I'm a newbie starting to play around with kerberized nfs on Debian. I not=
iced that in the systemd target file nfs-client.target <http://git.linux-nf=
s.org/?p=3Dsteved/nfs-utils.git;a=3Dblob;f=3Dsystemd/nfs-client.target;h=3D=
8a8300a1dfc6e6a77dfe0abed9942ded8f6b0103;hb=3Drefs/heads/master> has *rpc-s=
vcgssd* among its list of dependencies. From the man pages <https://linux.d=
ie.net/man/8/rpc.svcgssd>, it seems this is a server-side daemon, not clien=
t-, and as expected I don't seem to need it for the clients to mount anythi=
ng successfully. Why is this part of the client target?
>=20
> I thought it may be a dependency for something else, but I haven't been a=
ble to find what. Similarly, why is it installed with the *nfs-common* pack=
age instead of *nfs-kernel-server* if it's not needed?
>=20
> This came up because I kept seeing errors on boot caused by rpc.svcgssd l=
ooking for nfs//FQDN/@/REALM /in the keytab, but it doesn't exist. rpc.gssd=
, on the other hand, was updated <https://linux.die.net/man/8/rpc.gssd> to =
search for other principals, like host/FQDN@REALM, which is what gets set u=
p in the keytab by default.

An NFSv4 client has a small NFS server in it that handles callback operatio=
ns.
For NFSv4.0, this server can support the use of GSS/Kerberos on the backcha=
nnel
connection.

I thought gssproxy made svcgssd obsolete, but I'm probably misinformed.

--
Chuck Lever