2021-05-11 14:47:33

by David Howells

[permalink] [raw]
Subject: Extracting out the gss/krb5 support in sunrpc

Hi Trond,

I'm looking at extracting out the gssapi/krb5 support from the sunrpc package
in the kernel into a common library under crypto/ so that afs (and anyone else
- cifs, maybe) can use it too. Are you willing to entertain that idea - or is
that a definite no for you?

David


2021-05-11 15:15:56

by Trond Myklebust

[permalink] [raw]
Subject: Re: Extracting out the gss/krb5 support in sunrpc

On Tue, 2021-05-11 at 15:46 +0100, David Howells wrote:
> Hi Trond,
>
> I'm looking at extracting out the gssapi/krb5 support from the sunrpc
> package
> in the kernel into a common library under crypto/ so that afs (and
> anyone else
> - cifs, maybe) can use it too.  Are you willing to entertain that
> idea - or is
> that a definite no for you?
>
> David
>

Moving the code out of net/sunrpc into a shared directory would be fine
with me.
Note, though, that what's there is a rather old port of the MIT
kerberos library that was done by CITI around 2001/2002 (IIRC), so it
might be due for an update at some point.

--
Trond Myklebust
Linux NFS client maintainer, Hammerspace
[email protected]


2021-05-11 15:19:11

by Chuck Lever III

[permalink] [raw]
Subject: Re: Extracting out the gss/krb5 support in sunrpc



> On May 11, 2021, at 11:14 AM, Trond Myklebust <[email protected]> wrote:
>
> On Tue, 2021-05-11 at 15:46 +0100, David Howells wrote:
>> Hi Trond,
>>
>> I'm looking at extracting out the gssapi/krb5 support from the sunrpc
>> package
>> in the kernel into a common library under crypto/ so that afs (and
>> anyone else
>> - cifs, maybe) can use it too. Are you willing to entertain that
>> idea - or is
>> that a definite no for you?
>>
>> David
>>
>
> Moving the code out of net/sunrpc into a shared directory would be fine
> with me.
> Note, though, that what's there is a rather old port of the MIT
> kerberos library that was done by CITI around 2001/2002 (IIRC), so it
> might be due for an update at some point.

Would be nice to allocate legitimate SPDX tags for those old licenses
if that code isn't going to be replaced.

--
Chuck Lever